CVE:CVE-2004-1926
CNNVD:CNNVD-200404-012
Tiki CMS/Groupware (TikiWiki) 1.8.1以及之前的版本存在漏洞。远程攻击者借助(1) Theme， (2) Country， (3) Real Name，或(4) User Profile里的Displayed time zone字段，或Directory/Add Site operation里的（5）Name， (6) Description， (7) URL， or (8) Country字段注入任意代码。
solution:Upgrade tiki tikiwiki_cms/groupware to a higher version than 1.8.1,1.6.1,and avoid the version (,1.8.1],1.6.1
solution:Upgrade phprofession phprofession to a higher version than 2.5,and avoid the version 2.5