DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as .php or .cgi.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dokuwiki | Andreas_gohr | release_2004-07-04 (including) | release_2004-07-04 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-07 (including) | release_2004-07-07 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-12 (including) | release_2004-07-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-21 (including) | release_2004-07-21 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-25 (including) | release_2004-07-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-08 (including) | release_2004-08-08 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-15a (including) | release_2004-08-15a (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-22 (including) | release_2004-08-22 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-12 (including) | release_2004-09-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-25 (including) | release_2004-09-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-30 (including) | release_2004-09-30 (including) |