CVE-2005-0200

N/A Unknown
Published: May 02, 2005 Modified: April 16, 2026
View on NVD

Description

TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/13948
Source: cve@mitre.org
http://tikiwiki.org/art102
Source: cve@mitre.org
Patch
http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml
Source: cve@mitre.org
Patch
http://secunia.com/advisories/13948
Source: af854a3a-2127-422b-91ae-364da2661108
http://tikiwiki.org/art102
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

6 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.7%
72th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

tiki

Related CVEs

CVE-2025-71256 7.5
CVE-2025-71255 7.5
CVE-2025-71254 7.5
CVE-2025-71253 7.5
CVE-2025-71252 7.5