Stefan Birrer's Tikiwiki Userpage

Security leak in Full Text Search


Full text search displays all the objects in tiki containing some text, even those the user doesn't have read access to. In this way a user can see information he is not intended to see.