CVE-2006-4675
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows...
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
CVE-2006-4675- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
CVE-2006-4675- Updated
- 2026-11-02
EUVDEUVD-2006-4663 No score
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
EUVD-2006-4663- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h835-m7hg-6vqh No score
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows...
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
GHSA-h835-m7hg-6vqh- Updated
- 2026-11-02
OSV No score
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
CVE-2006-4675- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4675 No score
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.
- Record
DEBIAN-CVE-2006-4675- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4675 is a high vulnerability (CVSS 7.5) in Andreas Gohr Dokuwiki, published September 11, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 80th percentile. Fixed in dokuwiki 0.0.20060309-5.1.
References
retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html
securityreason.com/securityalert/1537
security.gentoo.org/glsa/glsa-200609-10.xml
secunia.com/advisories/21936
securityfocus.com/archive/1/445516/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2006-4675
github.com/advisories/GHSA-h835-m7hg-6vqh
security-tracker.debian.org/tracker/CVE-2006-4675