CVE-2006-5099

lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands…

published September 29, 2006

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02220 · 82.5th percentile
Published
2006-09-29T23:00Z
EPSS history
Timeline
  • 29 SEP 23:00Z
    lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands…
    cvelistv5