CVEvulnerability
CVE-2006-5845
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.
Affected configurations
• speedywiki speedywiki 2.0
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- http://marc.info/?l=bugtraq&m=116302805802656&w=2 Mailing List
- http://s-a-p.ca/index.php?page=OurAdvisories&id=9 Broken Link, URL Repurposed
- http://secunia.com/advisories/22788 Permissions Required, Third Party Advisory
- http://securitytracker.com/id?1017201 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4421 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30131 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=116302805802656&w=2 Mailing List
- http://s-a-p.ca/index.php?page=OurAdvisories&id=9 Broken Link, URL Repurposed
- http://secunia.com/advisories/22788 Permissions Required, Third Party Advisory
- http://securitytracker.com/id?1017201 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4421 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30131 exchange.xforce.ibmcloud.com