CVE-2011-5077 Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a dire...

HighCVSS 7.5 EPSS 2.1%

Published: 2012-02-08 17:58 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 02:35
Exploit status: No public exploit known

Description

Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in image directory.

Affected products

Product	Affected versions	Fixed in
hudong hdwiki	= 5.0	No fix listed

References

bbs.wolvez.org

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.06% (percentile 81.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.