CVE-2006-5845 Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.
MediumCVSS 6.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| speedywiki | = 2.0 | No fix listed |
References
- 20061108 Speedwiki 2.0 Arbitrary File Upload Vulnerability mailing-list
- s-a-p.ca broken-link url-repurposed
- 22788 permissions-required third-party-advisory
- 1017201 third-party-advisory vdb-entry
- ADV-2006-4421 not-applicable vdb-entry
- speedwiki-index-file-upload(30131) vdb-entry