This script is Copyright (C) 2007-2014 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200711-19
(TikiWiki: Multiple vulnerabilities)
Stefan Esser reported that a previous vulnerability (CVE-2007-5423,
GLSA 200710-21) was not properly fixed in TikiWiki 18.104.22.168
(CVE-2007-5682). The TikiWiki development team also added several
checks to avoid file inclusion.
A remote attacker could exploit these vulnerabilities to inject
arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
See also :
All TikiWiki users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/tikiwiki-22.214.171.124'
Risk factor :
High / CVSS Base Score : 7.5
Public Exploit Available : true