Page 4 of 31 results (0.001 seconds)

CVSS: 9.8EPSS: 2%CPEs: 27EXPL: 0

07 Jun 2006 — The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier. • http://bugs.splitbrain.org/index.php?do=details&id=823 •