PT-2004-2301 · Tikiwiki · Tikiwiki

Mose · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1386

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: TikiWiki versions prior to 1.8.4.1

Description: The issue is related to the improper verification of uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts.

Recommendations: For versions prior to 1.8.4.1, update to version 1.8.4.1 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2004-1386

Produtos afetados

Tikiwiki

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1386 · Nota de Segurança
• http://osvdb.org/12628 · Nota
• http://gentoo.org/security/en/glsa/glsa-200501-12.xml · Correção, Aviso do Fabricante
• http://tikiwiki.org/tiki-read_article.php?articleId=97 · Correção
• http://securitytracker.com/id?1012700 · Nota
• http://securityfocus.com/bid/12110 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18691 · Nota
• http://ciac.org/ciac/bulletins/p-084.shtml · Nota