Andreas Gohr : Security Vulnerabilities, CVEs, Published In 2004
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
Max CVSS
7.5
EPSS Score
3.12%
Published
2004-12-31
Updated
2017-07-11
DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
Max CVSS
7.5
EPSS Score
1.17%
Published
2004-12-31
Updated
2017-07-11
2 vulnerabilities found