CVE-2006-5845

Опубликовано: 10 нояб. 2006

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.

Ссылки

http://marc.info/?l=bugtraq&m=116302805802656&w=2
Mailing List
http://s-a-p.ca/index.php?page=OurAdvisories&id=9
Broken Link
URL Repurposed
http://secunia.com/advisories/22788
Permissions Required
Third Party Advisory
http://securitytracker.com/id?1017201
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2006/4421
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30131
http://marc.info/?l=bugtraq&m=116302805802656&w=2
Mailing List
http://s-a-p.ca/index.php?page=OurAdvisories&id=9
Broken Link
URL Repurposed
http://secunia.com/advisories/22788
Permissions Required
Third Party Advisory
http://securitytracker.com/id?1017201
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2006/4421
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/30131

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:speedywiki:speedywiki:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01032

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-j7p2-9xp5-vw32

github

почти 4 года назад