Gentoo Security Advisory GLSA 200705-16 (phpwiki)

The remote host is missing updates announced in advisory GLSA 200705-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200705-16 (phpwiki)

The remote host is missing updates announced in advisory GLSA 200705-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1371-1 (phpwiki)

The remote host is missing an update to phpwiki announced via advisory DSA 1371-1. OpenVAS Vulnerability Test $Id: deb13711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1371-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-2025

Unrestricted file upload vulnerability in the UpLoad feature lib/plugin/UpLoad.php in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file...

CVE-2007-2025

CVE-2007-2025 : PhpWiki 1.3.11p1’s UpLoad feature (lib/plugin/UpLoad.php) allows unrestricted file uploads due to insufficient file-name validation. An attacker can upload a PHP file with a double extension (e.g., .php.3), which Apache may execute, leading to remote code execution. Remediation in...