Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

TikiWiki: arbitrary command execution

Package(s):

TikiWiki

CVE #(s):

Created:

January 10, 2005

Updated:

January 31, 2005

Description:

TikiWiki lacks a check on uploaded images in the Wiki edit page. A malicious user could run arbitrary commands on the server by uploading and calling a PHP script.

Alerts:

Gentoo	200501-41	2005-01-30
Gentoo	200501-12	2005-01-10

(Log in to post comments)