Description
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
References
- dokuwiki-file-upload(17899) vdb-entry
- 11084 vdb-entry
- http://wiki.splitbrain.org/wiki:old_changes
- 11486 vdb-entry