CVE-2006-5844 in Speedywiki
Summary
by MITRE
Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) searchText[] parameters in (a) index.php, and (b) a direct request to upload.php without any parameters.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 04/27/2026
This vulnerability in Speedywiki 2.0 represents a critical path disclosure issue that exposes sensitive server information to remote attackers. The flaw occurs when the application processes specific parameters in its web requests, specifically the showRevisions[] and searchText[] parameters within the index.php file, as well as direct requests to upload.php without parameters. When these parameters are manipulated, the application inadvertently reveals the complete file system path of the web server, providing attackers with detailed information about the server's directory structure and installation location. This type of information disclosure vulnerability falls under the CWE-200 category, which specifically addresses the exposure of sensitive information to an unauthorized actor.
The technical implementation of this vulnerability stems from inadequate input validation and error handling within the Speedywiki application's parameter processing logic. When the application receives requests containing the vulnerable parameters, it fails to properly sanitize or validate the input before using it in error messages or internal processing functions. This lack of proper input sanitization allows the raw parameter values to be directly incorporated into error reporting mechanisms, which then expose the full server path to anyone who can make the appropriate requests. The vulnerability is particularly concerning because it can be exploited through multiple entry points, making it more difficult to fully mitigate and increasing the attack surface.
The operational impact of this vulnerability extends beyond simple information disclosure, as it provides attackers with crucial information needed for further exploitation attempts. Knowledge of the exact server path enables attackers to craft more sophisticated attacks, potentially leading to directory traversal, arbitrary file inclusion, or other privilege escalation techniques. The vulnerability affects both the main index.php file and the upload.php endpoint, creating multiple attack vectors that can be leveraged by threat actors. This information disclosure can be categorized under the ATT&CK technique T1083 for "File and Directory Discovery" and T1059.007 for "Command and Scripting Interpreter: JavaScript" when combined with other exploitation techniques. The exposure of server paths can significantly aid attackers in planning more targeted attacks against the system infrastructure.
Organizations using Speedywiki 2.0 should immediately implement several mitigation strategies to address this vulnerability. The primary recommendation involves implementing proper input validation and sanitization for all user-supplied parameters, particularly those that are processed by the application's internal functions. This includes ensuring that any parameters passed to the showRevisions[] and searchText[] functions are properly escaped or filtered before being used in error messages or internal processing. Additionally, the application should be configured to suppress detailed error messages that might reveal server path information. Implementing proper access controls and authentication mechanisms for the upload.php endpoint would also prevent unauthorized access to the vulnerable functionality. Security monitoring should be enhanced to detect unusual patterns of parameter manipulation that might indicate exploitation attempts, while also ensuring that the application's error handling logic does not inadvertently expose sensitive path information to end users.