Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2004-1405
7.5
HIGHCVSS v2
Published
December 31, 2004
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.3.5, = 1.3.6, = 1.3, = 1.3.10, = 1.3.4, = 1.3.0, = 1.3.3, = 1.3.1, = 1.3.7, = 1.3.11, = 1.3.2, = 1.3.8NVD