CVE-2011-4449

N/A

Descripcion

actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado9/5/2012

Ultima modificacion4/11/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

wikkawiki:wikkawiki

Referencias

http://wush.net/trac/wikka/changeset/1822(cve@mitre.org)

http://wush.net/trac/wikka/ticket/1097(cve@mitre.org)

http://wush.net/trac/wikka/changeset/1822(af854a3a-2127-422b-91ae-364da2661108)

http://wush.net/trac/wikka/ticket/1097(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.