Loading vulnerability details…
CVSS v3.1
N/A
EPSS
13.75%
Published
Oct 8, 2012
Modified
Apr 28, 2026
Public PoC / Exploit (3)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."
Weaknesses (CWE)
Affected Products (1)
References (12)