CVE-2006-4734
Publication date 13 September 2006
Last updated 17 July 2025
Ubuntu priority
Description
Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where parameters.