CVE-2006-4674

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, which is stored in config.php.

Vulnerabilidad de inyección de código estático directo en doku.php en DokuWiki anterior a 30/09/2006 permite a un atacante remoto ejecutar código PHP de su elección a través de la cabecera X-FORWARDED-FOR HTTP, la cual está almancenada en config.php.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-09-11 CVE Reserved
2006-09-11 CVE Published
2024-05-17 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (7)

URL	Tag	Source
http://bugs.splitbrain.org/index.php?do=details&id=906	X_refsource_confirm
http://secunia.com/advisories/21936	Third Party Advisory
http://securityreason.com/securityalert/1537	Third Party Advisory
http://www.securityfocus.com/archive/1/445516/100/0/threaded	Mailing List

URL	Date	SRC
http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html	2024-08-07

URL	Date	SRC
http://secunia.com/advisories/21819	2018-10-17

URL	Date	SRC
http://security.gentoo.org/glsa/glsa-200609-10.xml	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				<= release_2006-03-09 Search vendor "Andreas Gohr" for product "Dokuwiki" and version " <= release_2006-03-09"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-07-04 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-07-04"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-07-07 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-07-07"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-07-12 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-07-12"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-07-21 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-07-21"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-07-25 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-07-25"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-08-08 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-08-08"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-08-15a Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-08-15a"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-08-22 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-08-22"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-09-12 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-09-12"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-09-25 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-09-25"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-09-30 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-09-30"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-10-19 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-10-19"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-11-01 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-11-01"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-11-02 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-11-02"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2004-11-10 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2004-11-10"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-01-14 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-01-14"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-01-15 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-01-15"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-01-16a Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-01-16a"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-02-06 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-02-06"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-02-18 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-02-18"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-05-07 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-05-07"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-07-01 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-07-01"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-07-13 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-07-13"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-09-19 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-09-19"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2005-09-22 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2005-09-22"		-		Affected
Andreas Gohr Search vendor "Andreas Gohr"		Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki"				release_2006-03-05 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "release_2006-03-05"		-		Affected