CVE-2004-1405

CVE-2004-1405 describes a critical vulnerability in MediaWiki versions 1.3.8 and earlier, specifically when integrated with Apache's mod_mime module. This flaw allows remote attackers to upload and execute arbitrary code by exploiting improper handling of files with double extensions, such as ".php.rar". The vulnerability carries a high CVSS score of 7.5, indicating a severe risk with low attack complexity and no authentication required, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.