Vulnerability Details CVE-2004-2560
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 84.1%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2004-2560
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25
-
cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30