CVE-2004-1928: Tiki Tikiwiki Cms/groupware

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.

Affected products

• Tiki Tikiwiki Cms/groupware: up to and including 1.8.1; version 1.6.1 only

Published 2004-04-12. Last modified 2026-06-16.