Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2004-1405 — Mediawiki vulnerability

5 documents5 sources

Severity

7.5HIGHNVD

EPSS

10.2%

top 6.86%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Mediawiki Debian Mediawiki

Timeline

PublishedDec 31

Latest updateApr 29

Description

MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/mediawiki< mediawiki 1.4.9 (bookworm)

▶Debianmediawiki/mediawiki< 1.4.9+3

▶NVDmediawiki/mediawiki12 versions+11

Patches

Patch: wikipedia.sourceforge.net ↗Patch: www.securityfocus.com ↗Patch: wikipedia.sourceforge.net ↗

🔴Vulnerability Details

GHSA

GHSA-5vh9-m4v7-wxrg: MediaWiki 1↗2022-04-29

▶

OSV

CVE-2004-1405: MediaWiki 1↗2004-12-31

▶

💥Exploits & PoCs

Exploit-DB

MediaWiki 1.3.x - Arbitrary Script Upload↗2004-12-16

▶

📋Vendor Advisories

Debian

CVE-2004-1405: mediawiki - MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly h...↗2004

▶