CVE-2006-4602

Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath…

published September 7, 2006

CVSS
—
EPSS
44%
Percentile
98.8
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.44337 · 98.8th percentile
Published
2006-09-07T00:00Z
EPSS history
Timeline
  • 07 SEP 00:00Z
    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath…
    cvelistv5