Description
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.
References
- 12110 vdb-entry
- http://tikiwiki.org/tiki-read_article.php?articleId=97
- tikiwiki-image-command-execution(18691) vdb-entry
- GLSA-200501-12 vendor-advisory
- P-084 third-party-advisory government-resource
- 1012700 vdb-entry
- 12628 vdb-entry