p PatchFirst

CVE-2006-5099

CVE-2006-5099

This page contains facts from public vulnerability sources. Check the original advisory before updating.

lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert.

EPSS 2.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • dokuwiki Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-5.2

    Update to 0.0.20060309-5.2

  • dokuwiki Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-5.2

    Update to 0.0.20060309-5.2

  • dokuwiki Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.0.20060309-5.2

    Update to 0.0.20060309-5.2

Original sources

Check your server →