NVD

Id
61563  
Name
CVE-2006-2878  
Description
The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2011-03-07  
Seq
2006-2878  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318432 61563 CVE-2006-2878 http://bugs.splitbrain.org/index.php?do=details&id=823  View
318433 61563 CVE-2006-2878 20060605 Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker  View
318434 61563 CVE-2006-2878 1016221  View
318435 61563 CVE-2006-2878 GLSA-200606-16  View
318436 61563 CVE-2006-2878 http://www.hardened-php.net/advisory_042006.119.html  View
318437 61563 CVE-2006-2878 20060605 Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker  View
318438 61563 CVE-2006-2878 18289  View
318439 61563 CVE-2006-2878 ADV-2006-2142  View
318440 61563 CVE-2006-2878 dokuwiki-spellchecker-code-execution(26913)  View

Related JVN