7.5
CVSSv2

CVE-2004-2560

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

DokuWiki prior to 2004-10-19, when used on a web server that permits execution based on file extension, allows remote malicious users to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".

Vulnerable Product Search on Vulmon Subscribe to Product

andreas gohr dokuwiki release_2004-07-04

andreas gohr dokuwiki release_2004-07-07

andreas gohr dokuwiki release_2004-09-12

andreas gohr dokuwiki release_2004-09-25

andreas gohr dokuwiki release_2004-07-12

andreas gohr dokuwiki release_2004-07-21

andreas gohr dokuwiki release_2004-09-30

andreas gohr dokuwiki release_2004-07-25

andreas gohr dokuwiki release_2004-08-08

andreas gohr dokuwiki release_2004-08-15a

andreas gohr dokuwiki release_2004-08-22