Phpwiki: >> Phpwiki >> 1.3.11p1 Security Vulnerabilities
Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.
CVSS Score
7.5
EPSS Score
0.013
Published
2007-04-13