Description
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
References
- GLSA-200501-41 vendor-advisory
- 13948 third-party-advisory
- http://tikiwiki.org/art102