https://www.exploit-db.com/exploits/23962
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200404-013

TikiCMS/Groupware(TikiWiki)1.8.1及其早期版本存在多个跨站脚本（XSS）漏洞。远程攻击者可以通过（1）tiki-switch_theme.php的theme参数（2）messu-mailbox.php的find和priority参数，（3）messu-read.php的flag，priority，flagval，sort_mode或者find参数，（4）tiki-read_article.php的articleId参数，（5）tiki-browse_categories.php的parentId参数，（6）tiki-index.php的comments_threshold参数（7）tiki-print_article.php的articleId参数，（8）tiki-list_file_gallery.php的galleryId参数，（9）tiki-upload_file.php的galleryId参数，（10）tiki-view_faq.php的faqId参数，（11）tiki-view_chart.php的chartId参数，或（12）tiki-survey_stats_survey.php的surveyId参数注入任意的web脚本或者HTML。

source: http://www.securityfocus.com/bid/10100/info
           
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-view_chart.php?chartId=[VID][XSS]

来源:XF
名称:tikiwiki-xss(15846)
链接:http://xforce.iss.net/xforce/xfdb/15846
来源:BID
名称:10100
链接:http://www.securityfocus.com/bid/10100
来源:tikiwiki.org
链接:http://tikiwiki.org/tiki-read_article.php?articleId=66
来源:SECUNIA
名称:11344
链接:http://secunia.com/advisories/11344
来源:BUGTRAQ
名称:20040412MultipleVulnerabilitiesInTikiCMS/Groupware[TikiWiki]
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=108180073206947&w;=2