CVE-2004-1386: Tiki Tikiwiki Cms/groupware

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.

Affected products

• Tiki Tikiwiki Cms/groupware: up to and including 1.6.1

Published 2004-12-31. Last modified 2026-06-16.