CVE-2004-2560: High severity Andreas Gohr Dokuwiki vulnerability
Published Dec 31, 2004
·Updated
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
Affected Software
11 affected components
Andreas Gohr Dokuwiki=release_2004-07-07
Andreas Gohr Dokuwiki=release_2004-08-08
Andreas Gohr Dokuwiki=release_2004-09-12
Andreas Gohr Dokuwiki=release_2004-07-25
Andreas Gohr Dokuwiki=release_2004-08-22
Andreas Gohr Dokuwiki=release_2004-09-25
Andreas Gohr Dokuwiki=release_2004-07-04
Andreas Gohr Dokuwiki=release_2004-07-21
Andreas Gohr Dokuwiki=release_2004-09-30
Andreas Gohr Dokuwiki=release_2004-08-15a
Andreas Gohr Dokuwiki=release_2004-07-12
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Nov 22, 2005
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2560?
CVE-2004-2560 is classified as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2004-2560?
To fix CVE-2004-2560, upgrade to a version of DokuWiki released after October 19, 2004.
3
Which versions of DokuWiki are affected by CVE-2004-2560?
DokuWiki versions before 2004-10-19 are affected by CVE-2004-2560.
4
Can CVE-2004-2560 be exploited remotely?
Yes, CVE-2004-2560 can be exploited remotely by uploading files with executable extensions.
5
What types of files can be used to exploit CVE-2004-2560?
Files with extensions such as ".php" and ".cgi" can be used to exploit CVE-2004-2560.