CVE-2004-1405

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.

Affected (12)

Products: Mediawiki: Mediawiki

Mediawiki

1 product

Mediawiki

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.3.0
Mediawiki Mediawiki	Version 1.3.10
Mediawiki Mediawiki	Version 1.3.11
Mediawiki Mediawiki	Version 1.3.1
Mediawiki Mediawiki	Version 1.3.2
Mediawiki Mediawiki	Version 1.3.3
Mediawiki Mediawiki	Version 1.3.4
Mediawiki Mediawiki	Version 1.3.5
Mediawiki Mediawiki	Version 1.3.6
Mediawiki Mediawiki	Version 1.3.7
Mediawiki Mediawiki	Version 1.3.8
Mediawiki Mediawiki	Version 1.3