CVE-2004-1405
CVE-2004-1405
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
EPSS 5.2% · Public exploit · Fix available
- Published
- Updated
Stack: system