Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2006-2878

The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.6%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2006-2878
  • Andreas Gohr » Dokuwiki » Version: Any
    cpe:2.3:a:andreas_gohr:dokuwiki:*
  • Andreas Gohr » Dokuwiki » Version: release_2004-07-04
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04
  • Andreas Gohr » Dokuwiki » Version: release_2004-07-07
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07
  • Andreas Gohr » Dokuwiki » Version: release_2004-07-12
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12
  • Andreas Gohr » Dokuwiki » Version: release_2004-07-21
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21
  • Andreas Gohr » Dokuwiki » Version: release_2004-07-25
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25
  • Andreas Gohr » Dokuwiki » Version: release_2004-08-08
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08
  • Andreas Gohr » Dokuwiki » Version: release_2004-08-15a
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a
  • Andreas Gohr » Dokuwiki » Version: release_2004-08-22
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22
  • Andreas Gohr » Dokuwiki » Version: release_2004-09-12
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12
  • Andreas Gohr » Dokuwiki » Version: release_2004-09-25
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25
  • Andreas Gohr » Dokuwiki » Version: release_2004-09-30
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30
  • Andreas Gohr » Dokuwiki » Version: release_2004-10-19
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-10-19
  • Andreas Gohr » Dokuwiki » Version: release_2004-11-01
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-01
  • Andreas Gohr » Dokuwiki » Version: release_2004-11-02
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-02
  • Andreas Gohr » Dokuwiki » Version: release_2004-11-10
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-11-10
  • Andreas Gohr » Dokuwiki » Version: release_2005-01-14
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-14
  • Andreas Gohr » Dokuwiki » Version: release_2005-01-15
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-15
  • Andreas Gohr » Dokuwiki » Version: release_2005-01-16a
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-01-16a
  • Andreas Gohr » Dokuwiki » Version: release_2005-02-06
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-06
  • Andreas Gohr » Dokuwiki » Version: release_2005-02-18
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-02-18
  • Andreas Gohr » Dokuwiki » Version: release_2005-05-07
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-05-07
  • Andreas Gohr » Dokuwiki » Version: release_2005-07-01
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-01
  • Andreas Gohr » Dokuwiki » Version: release_2005-07-13
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-07-13
  • Andreas Gohr » Dokuwiki » Version: release_2005-09-19
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-19
  • Andreas Gohr » Dokuwiki » Version: release_2005-09-22
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2005-09-22
  • Andreas Gohr » Dokuwiki » Version: release_2006-03-05
    cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-05


Contact Us

Shodan ® - All rights reserved