OSVDB: The Open Source Vulnerability Database

Creditee: Maciej Piotr Falkiewicz

Known Contact Information:

(as of 2005-06-22)

Known Affiliations:

iDefense Labs VCP (as of 2005-06-22)

Disclosed Vulnerabilities (3):

Disc. Date	OSVDB ID	CVEID	Title
2005-11-10	20923	2005-1925	TikiWiki tiki-user_preferences.php language Variable Traversal Arbitrary File Access
2005-06-22	17425	2005-1526	Cacti config_settings.php config Parameter Remote File Inclusion
2005-06-22	17426	2005-1524	Cacti top_graph_header.php config Parameter Remote File Inclusion

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.