CVE-2007-5423

Name of the Vulnerable Software and Affected Versions: TikiWiki version 1.9.8

Description: The issue allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by the create function function.

Recommendations: For TikiWiki version 1.9.8, consider restricting access to the tiki-graph formula.php file until a patch is available. As a temporary workaround, avoid using the f array parameter in the affected file to minimize the risk of exploitation.