Tiki under attack

Author: Oliver Hertel - Published At: Mon 04 Sep 2006 06:44 UTC - (35596 Reads)

Maybe you already found this domain partially unavailable this weekend. Some russian hackers are attacking tiki installations currently, trying to install spam and/or DoS bots. We are working at it and hope to have solved the problems soon.

Sorry for the inconveniences.

Details and quick fix here!

Tikiwiki security release

Author: Mose - Published At: Wed 31 May 2006 19:19 UTC - (8256 Reads)

This release fixes a recently declared XSS vulnerability. Anyone using Tikiwiki 1.9.x should upgrade as soon as possible. This release only fixes the security flaw and doesn't include any new feature.

Security Fix

Author: Florian Gleixner - Published At: Sat 02 Jul 2005 22:44 UTC - (6037 Reads)

Gulftech Research pointed us to a bug in the xmlrpc library. This bug can be used to execute any php code remote. This is a serious security flaw and we encourage you to either use a workaround or to install updated xmlrpc libraries immediately.

January Security Alert

Author: Damian Parker - Published At: Sun 16 Jan 2005 08:51 UTC - (57256 Reads)

It has been brought to the security team's attention that yet more problems exist in TikiWiki; these are similar to the Christmas Alert, but affect a different directory. Everyone is required to read and take corrective action. If you do not take action you could lose your entire server!

Weihnachts Sicherheitswarnung: php injection

Author: mose - Published At: Mon 13 Dec 2004 16:55 UTC - (8871 Reads)

Wichtiger Sicherheitshinweis für alle TikiWiki Administratoren und Entwickler, der alle Versionen von Tikiwiki betrifft: falls Sie ein Tikiwiki System betreiben, dann lesen Sie bitte die Einzelheiten dieses Beitrags, er enthält eine schnelle Lösung (eine Zeile in einer Datei) für ein Sicherheitsproblem.

  • «
  • 1 (current)
  • 2

Why Register?

Register at tiki.org and you'll be able to use it at any *.tiki.org site, thanks to the InterTiki feature. A valid email address is required to receive site notifications and occasional newsletters. You can opt out of these items at any time.

Subscribe to Tiki Newsletters!

Delivered fresh to your email inbox!
Newsletter subscribe icon
Don't miss major announcements and other news!
Contribute to Tiki


Torsten Fabricius, 09:54 UTC, Wed 19 Feb 2014: Hello everybody, please mind the ((TikiFestSysadmin2014)) in August. Mainly meant for the Sysadmins, which are located in and near Germany (and France), active community members from Canada are expected to be attending.
luciash d' being, 12:28 UTC, Wed 01 Jan 2014: Happy New Year ! :-)
luciash d' being, 14:00 UTC, Sun 27 Oct 2013: @ricks99: there is a regression bug in Tiki resetting the avatars to the default one imho
Rick, 16:56 UTC, Wed 31 Jul 2013: What happened to the avatars?
Jonny Bradley, 12:44 UTC, Wed 10 Apr 2013: Biggest TikiFest in ages starts tomorrow [Link]