S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2011-4336 Scanner

CVE-2011-4336 scanner - Cross-Site Scripting (XSS) vulnerability in Tiki Wiki CMS Groupware

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
3.4k
Times Used
continuous scan runs
3.9k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2011-4336
6.1
CVSS

Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
Wiki CMS Groupwareby Tiki
7.0
Updated Aug 22, 2026View on NVD →
Detail

Tiki Wiki CMS Groupware is an open-source content management system that is designed to handle a variety of different needs within an organization, including project management, collaboration, and document management. With its wide range of features and user-friendly interface, Tiki Wiki CMS Groupware has become a popular choice for businesses and organizations of all sizes.

Unfortunately, the software is not without its vulnerabilities, and one of the most serious of these is CVE-2011-4336. This particular vulnerability is caused by an XSS via the GET "ajax" parameter to snarf_ajax.php, and it can allow an attacker to inject their own code into a victim's browser. This code can then be used to steal sensitive information, such as passwords or financial data, or even to take control of the victim's computer.

If this vulnerability is exploited, it can have serious consequences for both individuals and organizations. For instance, it can potentially lead to the theft of confidential information, the loss of data, or even financial fraud. In addition, it can damage an organization's reputation and cause a loss of trust among customers and business partners.

At s4e.io, we understand that keeping your digital assets safe is essential, which is why we offer a range of pro features that can help you easily and quickly learn about vulnerabilities in your system. With our comprehensive security tools and expert advice, you can rest assured that your business is fully protected against the latest threats. So why wait? Sign up for our services today and experience the peace of mind that comes with knowing your digital assets are fully secure.

 

REFERENCES

Solution Advice

Fortunately, there are a number of precautions that can be taken to protect against this vulnerability, including:

  • Updating to the latest version of Tiki Wiki CMS Groupware
  • Restricting access to critical systems and data
  • Implementing web application firewalls
  • Conducting regular security audits and penetration testing
  • Providing security awareness training to employees

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2011-4336 scanner - Cross-Site Scripting (XSS) vulnerability in Tiki Wiki CMS Groupware | S4E