Lucene search

[email protected]CVE-2006-2878

HistoryJun 07, 2006 - 12:02 a.m.

CVE-2006-2878

2006-06-0700:02:00

[email protected]

web.nvd.nist.gov

183

dokuwiki

cve-2006-2878

spellchecker

php code execution

remote attack

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.7%

JSON

The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via “complex curly syntax” that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.

Affected configurations

NVD

Node

andreas_gohrdokuwikiRange≤release_2006-06-04

andreas_gohrdokuwikiMatchrelease_2004-07-04

andreas_gohrdokuwikiMatchrelease_2004-07-07

andreas_gohrdokuwikiMatchrelease_2004-07-12

andreas_gohrdokuwikiMatchrelease_2004-07-21

andreas_gohrdokuwikiMatchrelease_2004-07-25

andreas_gohrdokuwikiMatchrelease_2004-08-08

andreas_gohrdokuwikiMatchrelease_2004-08-15a

andreas_gohrdokuwikiMatchrelease_2004-08-22

andreas_gohrdokuwikiMatchrelease_2004-09-12

andreas_gohrdokuwikiMatchrelease_2004-09-25

andreas_gohrdokuwikiMatchrelease_2004-09-30

andreas_gohrdokuwikiMatchrelease_2004-10-19

andreas_gohrdokuwikiMatchrelease_2004-11-01

andreas_gohrdokuwikiMatchrelease_2004-11-02

andreas_gohrdokuwikiMatchrelease_2004-11-10

andreas_gohrdokuwikiMatchrelease_2005-01-14

andreas_gohrdokuwikiMatchrelease_2005-01-15

andreas_gohrdokuwikiMatchrelease_2005-01-16a

andreas_gohrdokuwikiMatchrelease_2005-02-06

andreas_gohrdokuwikiMatchrelease_2005-02-18

andreas_gohrdokuwikiMatchrelease_2005-05-07

andreas_gohrdokuwikiMatchrelease_2005-07-01

andreas_gohrdokuwikiMatchrelease_2005-07-13

andreas_gohrdokuwikiMatchrelease_2005-09-19

andreas_gohrdokuwikiMatchrelease_2005-09-22

andreas_gohrdokuwikiMatchrelease_2006-03-05

CPENameOperatorVersion
andreas_gohr:dokuwikiandreas gohr dokuwikilerelease_2006-06-04
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-04
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-07
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-12
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-21
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-07-25
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-08
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-15a
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-08-22
andreas_gohr:dokuwikiandreas gohr dokuwikieqrelease_2004-09-12

CPE	Name	Operator	Version
andreas_gohr:dokuwiki	andreas gohr dokuwiki	le	release_2006-06-04
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-04
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-07
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-12
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-21
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-07-25
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-08
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-15a
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-08-22
andreas_gohr:dokuwiki	andreas gohr dokuwiki	eq	release_2004-09-12