Stefan Birrer's Tikiwiki Userpage

Security leak in Full Text Search

Full text search displays all the objects in tiki containing some text, even those the user doesn't have read access to. In this way a user can see information he is not intended to see.

Page last modified on Friday 02 April 2004 14:31:16 GMT-0000

Upcoming Events

No records to display

Why Register?

Register at tiki.org and you'll be able to use the account at any *.tiki.org site, thanks to the InterTiki feature. A valid email address is required to receive site notifications and occasional newsletters. You can opt out of these items at any time.