PT-2004-2301 · Tikiwiki · Tikiwiki

Mose · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1386

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: TikiWiki versions prior to 1.8.4.1

Description: The issue is related to the improper verification of uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts.

Recommendations: For versions prior to 1.8.4.1, update to version 1.8.4.1 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2004-1386

Affected Products

Tikiwiki

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-1386 · Security Note
• http://tikiwiki.org/tiki-read_article.php?articleId=97 · Patch
• http://securityfocus.com/bid/12110 · Patch
• http://osvdb.org/12628 · Note
• http://gentoo.org/security/en/glsa/glsa-200501-12.xml · Patch, Vendor Advisory
• http://securitytracker.com/id?1012700 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18691 · Note
• http://ciac.org/ciac/bulletins/p-084.shtml · Note