CVE-2004-2560: Andreas Gohr Dokuwiki

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".

Affected products

• Andreas Gohr Dokuwiki: version release_2004-07-04 only; version release_2004-07-07 only; version release_2004-07-12 only; version release_2004-07-21 only; version release_2004-07-25 only; version release_2004-08-08 only; …

Published 2004-12-31. Last modified 2026-06-16.