CVE-2004-2560

CVE-2004-2560 describes a critical vulnerability in DokuWiki versions prior to 2004-10-19. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading files with executable extensions (e.g., .php, .cgi) on web servers configured to permit such execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential impact remains high if exploited.