DokuWiki before 2004-10-19 when used on a web server that permits execution based on file extension allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as \.php\ or \.cgi\.