CVE-2005-3529: Tiki Tikiwiki Cms/groupware

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.

Affected products

• Tiki Tikiwiki Cms/groupware: version 1.9.0 only; version 1.9.1 only; version 1.9.2 only

Published 2005-11-20. Last modified 2026-06-16.