CVE-2006-5845

Speedywiki - Unrestricted File Upload

Title source: rule

Description

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.

References (6)

[Mailing List] http://marc.info/?l=bugtraq&m=116302805802656&w=2

[Broken Link, URL Repurposed] http://s-a-p.ca/index.php?page=OurAdvisories&id=9

[Permissions Required, Third Party Advisory] http://secunia.com/advisories/22788

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017201

[Not Applicable] http://www.vupen.com/english/advisories/2006/4421

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/30131

Scores

EPSS 0.0103

EPSS Percentile 77.1%

Classification

CWE

CWE-434

Status draft

Affected Products (1)

speedywiki/speedywiki

Timeline

Published Nov 10, 2006

Tracked Since Feb 18, 2026