iDEFENSE Security Advisory 11.10.05 – Remote exploitation of an input validation vulnerability in Tikiwiki could allow attackers to gain access to arbitrary files on the vulnerable system and execute arbitrary code under the privileges of the underlying web-server. iDEFENSE has confirmed the existence of this issue in Tikiwiki versions 1.8.4 and 1.8.5. It is suspected that earlier versions are vulnerable as well. This vulnerability differs than the one described in 11.10.05-2.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41493/11.10.05-3.txt
Source: https://packetstormsecurity.com/files/41493/iDEFENSE-Security-Advisory-2005-11-10.3.html