CVE-2006-5099
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2006-5099
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2006-5099.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2006-5099
- Downstream
- Published
- 2006-09-29T23:07:00Z
- Modified
- 2025-08-09T20:01:28Z
- Summary
- [none]
- Details
-
lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert.
- References