Lucene search
HistorySep 11, 2006 - 5:04 p.m.
CVE-2006-4674
cve-2006-4674
static code injection
doku.php
dokuwiki
vulnerability
remote code execution
php
config.php
security advisory
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.018 Low
EPSS
Percentile
88.1%
Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php.
Related
nessus
nessus
DokuWiki doku.php X-FORWARDED-FOR HTTP Header Arbitrary Code Injection
2006-09-08 00:00:00
GLSA-200609-10 : DokuWiki: Arbitrary command execution
2006-09-15 00:00:00
ubuntucve
ubuntucve
CVE-2006-4674
2006-09-11 00:00:00
debiancve
debiancve
CVE-2006-4674
2006-09-11 17:04:00
cvelist
cvelist
CVE-2006-4674
2006-09-11 17:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200609-10 (dokuwiki)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200609-10 (dokuwiki)
2008-09-24 00:00:00
FreeBSD Ports: dokuwiki
2008-09-04 00:00:00
freebsd
freebsd
dokuwiki -- multiple vulnerabilities
2006-09-08 00:00:00
gentoo
gentoo
DokuWiki: Arbitrary command execution
2006-09-14 00:00:00
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.018 Low
EPSS
Percentile
88.1%
Related for CVE-2006-4674