CVE-2009-0602
wikkitikkitavi wikkitikkitavi: no CVSS score yet. EPSS 4.5% chance of exploitation in the next 30 days.
Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/.
- EPSS
- 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wikkitikkitavi:wikkitikkitavi