Moniwiki: >> Moniwiki >> 1.0.8 Security Vulnerabilities
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code.
CVSS Score
5.0
EPSS Score
0.018
Published
2004-12-31
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php.
CVSS Score
4.3
EPSS Score
0.004
Published
2004-10-25