Vulnerability in MediaWiki
CVE-2004-1405
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.
Affected products
- Mediawiki — versions 1.3, 1.3.0, 1.3.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)