CVE:CVE-2006-2878
CNNVD:CNNVD-200606-146
DokuWiki 2006/06/04及更早版本中的spellchecker (spellcheck.php)允许远程攻击者通过插入到正则表达式内的"复杂缠绕语法"(由带有/e(可执行)修饰符的preg_replace处理)来执行任意PHP代码。
solution:Upgrade andreas_gohr dokuwiki to a higher version than release_2006-06-04,release_2004-07-04,release_2004-07-07,release_2004-07-12,release_2004-07-21,release_2004-07-25,release_2004-08-08,release_2004-08-15a,release_2004-08-22,release_2004-09-12,release_2004-09-25,release_2004-09-30,release_2004-10-19,release_2004-11-01,release_2004-11-02,release_2004-11-10,release_2005-01-14,release_2005-01-15,release_2005-01-16a,release_2005-02-06,release_2005-02-18,release_2005-05-07,release_2005-07-01,release_2005-07-13,release_2005-09-19,release_2005-09-22,release_2006-03-05,and avoid the version (,release_2006-06-04],release_2004-07-04,release_2004-07-07,release_2004-07-12,release_2004-07-21,release_2004-07-25,release_2004-08-08,release_2004-08-15a,release_2004-08-22,release_2004-09-12,release_2004-09-25,release_2004-09-30,release_2004-10-19,release_2004-11-01,release_2004-11-02,release_2004-11-10,release_2005-01-14,release_2005-01-15,release_2005-01-16a,release_2005-02-06,release_2005-02-18,release_2005-05-07,release_2005-07-01,release_2005-07-13,release_2005-09-19,release_2005-09-22,release_2006-03-05