p PatchFirst

CVE-2006-2878

CVE-2006-2878

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.

EPSS 13.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • dokuwiki Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-4

    Update to 0.0.20060309-4

  • dokuwiki Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-4

    Update to 0.0.20060309-4

  • dokuwiki Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-4

    Update to 0.0.20060309-4

Original sources

Check your server →