← back
CVE-2004-1928

CVE-2004-1928

EPSS 3.1%
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/43809unverifiedexploitdbwww.exploit-db.com/exploits/23948unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=108180073206947&w=2http://secunia.com/advisories/11344https://exchange.xforce.ibmcloud.com/vulnerabilities/15849http://tikiwiki.org/tiki-read_article.php?articleId=66http://www.securityfocus.com/bid/10100