CVE-2004-2560

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".

Affected (11)

Products: Andreas Gohr: Dokuwiki

Andreas Gohr

1 product

Dokuwiki

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Andreas Gohr Dokuwiki	Version release_2004-07-04
Andreas Gohr Dokuwiki	Version release_2004-07-07
Andreas Gohr Dokuwiki	Version release_2004-07-12
Andreas Gohr Dokuwiki	Version release_2004-07-21
Andreas Gohr Dokuwiki	Version release_2004-07-25
Andreas Gohr Dokuwiki	Version release_2004-08-08
Andreas Gohr Dokuwiki	Version release_2004-08-15a
Andreas Gohr Dokuwiki	Version release_2004-08-22
Andreas Gohr Dokuwiki	Version release_2004-09-12
Andreas Gohr Dokuwiki	Version release_2004-09-25
Andreas Gohr Dokuwiki	Version release_2004-09-30