← Database

CVE-2004-1386

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.

Affected Platforms

Tiki Tikiwiki Cms\/Groupware

Weakness Type

CWE-20

References