CVE-2005-0200: Tiki Tikiwiki Cms/groupware

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.

Affected products

• Tiki Tikiwiki Cms/groupware: up to and including 1.6.1

Published 2005-05-02. Last modified 2026-06-16.