CVE-2006-2878
NoneCVSS
—
EPSS
13.9%
Published
Jun 7, 2006
CISA due date
—
The record
The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | dokuwiki | 0 | 0.0.20060309-4 |
| Debian:11 | dokuwiki | 0 | 0.0.20060309-4 |
| Debian:12 | dokuwiki | 0 | 0.0.20060309-4 |
| Debian:13 | dokuwiki | 0 | 0.0.20060309-4 |
Related vulnerabilities
- CVE-2010-0288 A typo in the administrator permission check in the ACL Manager plugin… Also affects dokuwiki
- CVE-2010-0287 Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in… Also affects dokuwiki
- CVE-2009-1960 inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when… Also affects dokuwiki