CVE

Id
9973  
CVE No.
CVE-2004-1545  
Status
Candidate  
Description
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68221 9973 CVE-2004-1545 BUGTRAQ:20041215 STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki  View
68222 9973 CVE-2004-1545 URL:http://marc.info/?l=bugtraq&m=110314544711884&w=2  View
68223 9973 CVE-2004-1545 FULLDISC:20041215 STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki  View
68224 9973 CVE-2004-1545 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0448.html  View
68225 9973 CVE-2004-1545 CONFIRM:http://kldp.net/scm/cvsweb.php/moniwiki/plugin/UploadFile.php.diff?cvsroot=moniwiki&only_with_tag=HEAD&r1=text&tr1=1.17&r2=text&tr2=1.16&f=h  View
68226 9973 CVE-2004-1545 BID:11951  View
68227 9973 CVE-2004-1545 URL:http://www.securityfocus.com/bid/11951  View
68228 9973 CVE-2004-1545 SECUNIA:13478  View
68229 9973 CVE-2004-1545 URL:http://secunia.com/advisories/13478  View
68230 9973 CVE-2004-1545 XF:moniwiki-file-upload(18493)  View

Related JVN