Gentoo Security Advisory GLSA 200501-41 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200501-41. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200501-41 : TikiWiki: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200501-41 TikiWiki: Arbitrary command execution TikiWiki does not validate files uploaded to the 'temp' directory. Impact : A malicious user could run arbitrary commands on the server by uploading and calling a PHP script...

CVE-2005-0200

CVE-2005-0200 affects TikiWiki prior to 1.8.5, where uploaded files in the temp directory could bypass validation and allow a remote attacker to upload and execute arbitrary PHP scripts (a separate issue from CVE-2004-1386). Open-source/advisory references (GLSA GLSA-200501-41, GLSA-200501-12) in...