iDEFENSE Security Advisory 11.10.05 – Remote exploitation of an input validation vulnerability in Tikiwiki allows attackers to gain access to arbitrary files on the vulnerable system under the privileges of the underlying web-server. iDEFENSE has confirmed the existence of this issue in Tikiwiki versions 1.8.4 and 1.8.5. It is suspected that earlier versions are vulnerable as well.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41492/11.10.05-2.txt
Source: https://packetstormsecurity.com/files/41492/iDEFENSE-Security-Advisory-2005-11-10.2.html