# Tiki Tikiwiki Cms\/Groupware


- [CVE-2008-3653](https://insights.sbomify.com/CVE-2008-3653/): Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors. (critical 10.0)
- [CVE-2007-6529](https://insights.sbomify.com/CVE-2007-6529/): Other in n/a (critical 10.0)
- [CVE-2010-4239](https://insights.sbomify.com/CVE-2010-4239/): Path traversal in CMS Groupware (critical 9.8)
- [CVE-2012-0911](https://insights.sbomify.com/CVE-2012-0911/): Deserialization in n/a (critical 9.8)
- [CVE-2025-34111](https://insights.sbomify.com/CVE-2025-34111/): Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE (critical 9.3)
- [CVE-2020-29254](https://insights.sbomify.com/CVE-2020-29254/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2010-4241](https://insights.sbomify.com/CVE-2010-4241/): Tiki Wiki CMS Groupware 5.2 has CSRF (high 8.8)
- [CVE-2018-20719](https://insights.sbomify.com/CVE-2018-20719/): SQL injection in n/a (high 8.8)
- [CVE-2017-14924](https://insights.sbomify.com/CVE-2017-14924/): Cross-site request forgery in n/a (high 8.0)
- [CVE-2017-14925](https://insights.sbomify.com/CVE-2017-14925/): Cross-site request forgery in n/a (high 8.0)
- [CVE-2016-10143](https://insights.sbomify.com/CVE-2016-10143/): Path traversal in n/a (high 7.5)
- [CVE-2013-4715](https://insights.sbomify.com/CVE-2013-4715/): SQL injection in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/tiki/tikiwiki-cms%5C/groupware/