Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dokuwiki dokuwiki 2005-09-19 vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2011-2510
Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki prior to 2011-05-25a Rincewind allows remote malicious users to inject arbitrary web script or HTML via a link.
Dokuwiki Dokuwiki 2006-03-09Dokuwiki Dokuwiki 2006-03-05Dokuwiki Dokuwiki 2009-02-14bDokuwiki Dokuwiki 2008-05-05Dokuwiki Dokuwiki 2005-07-13Dokuwiki Dokuwiki 2005-07-01Dokuwiki DokuwikiDokuwiki Dokuwiki 2009-12-25cDokuwiki Dokuwiki 2005-09-22Dokuwiki Dokuwiki 2005-09-19Dokuwiki Dokuwiki 2007-06-26Dokuwiki Dokuwiki 2006-11-06
505
VMScore
CVE-2010-0287
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki prior to 2009-12-25b allows remote malicious users to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.
Dokuwiki Dokuwiki 2006-03-09Dokuwiki Dokuwiki 2006-03-05Dokuwiki Dokuwiki 2006-06-04Dokuwiki Dokuwiki 2006-03-09eDokuwiki Dokuwiki 2005-05-07Dokuwiki Dokuwiki 2005-02-18Dokuwiki Dokuwiki 2004-11-01Dokuwiki Dokuwiki 2004-09-30Dokuwiki Dokuwiki 2004-09-25Dokuwiki Dokuwiki 2004-07-12Dokuwiki Dokuwiki 2004-07-07Dokuwiki DokuwikiDokuwiki Dokuwiki 2005-07-13Dokuwiki Dokuwiki 2005-07-01Dokuwiki Dokuwiki 2004-11-10Dokuwiki Dokuwiki 2004-11-02Dokuwiki Dokuwiki 2004-07-25Dokuwiki Dokuwiki 2004-07-21Dokuwiki Dokuwiki 2005-02-06Dokuwiki Dokuwiki 2005-01-16aDokuwiki Dokuwiki 2004-09-12Dokuwiki Dokuwiki 2004-08-22
755
VMScore
CVE-2010-0288
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki prior to 2009-12-25b allows remote malicious users to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
Dokuwiki Dokuwiki 2006-03-05Dokuwiki Dokuwiki 2005-09-22Dokuwiki Dokuwiki 2005-01-15Dokuwiki Dokuwiki 2005-01-14Dokuwiki Dokuwiki 2004-08-22Dokuwiki Dokuwiki 2004-08-15aDokuwiki Dokuwiki 2006-03-09eDokuwiki Dokuwiki 2006-03-09Dokuwiki Dokuwiki 2005-02-18Dokuwiki Dokuwiki 2005-02-06Dokuwiki Dokuwiki 2005-01-16aDokuwiki Dokuwiki 2004-09-25Dokuwiki Dokuwiki 2004-09-12Dokuwiki Dokuwiki 2004-07-07Dokuwiki Dokuwiki 2004-07-04Dokuwiki Dokuwiki 2005-09-19Dokuwiki Dokuwiki 2005-07-13Dokuwiki Dokuwiki 2004-11-10Dokuwiki Dokuwiki 2004-11-02Dokuwiki Dokuwiki 2004-08-08Dokuwiki Dokuwiki 2004-07-25Dokuwiki Dokuwiki
605
VMScore
CVE-2010-0289
Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki prior to 2009-12-25c allow remote malicious users to hijack the authentication of administrators for requests that modify access control rules, and other unspec...
Dokuwiki Dokuwiki 2006-06-04Dokuwiki Dokuwiki 2005-05-07Dokuwiki Dokuwiki 2005-02-18Dokuwiki Dokuwiki 2004-11-01Dokuwiki Dokuwiki 2004-09-30Dokuwiki Dokuwiki 2004-07-21Dokuwiki Dokuwiki 2004-07-12Dokuwiki Dokuwiki 2005-07-13Dokuwiki Dokuwiki 2005-07-01Dokuwiki Dokuwiki 2004-11-10Dokuwiki Dokuwiki 2004-11-02Dokuwiki Dokuwiki 2004-08-08Dokuwiki Dokuwiki 2004-07-25Dokuwiki Dokuwiki 2006-03-09eDokuwiki Dokuwiki 2006-03-09Dokuwiki Dokuwiki 2005-02-06Dokuwiki Dokuwiki 2005-01-16aDokuwiki Dokuwiki 2004-09-25Dokuwiki Dokuwiki 2004-09-12Dokuwiki Dokuwiki 2004-07-07Dokuwiki Dokuwiki 2004-07-04Dokuwiki Dokuwiki
383
VMScore
CVE-2012-0283
Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki prior to 2012-01-25b allows remote malicious users to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.
Andreas Gohr Dokuwiki 2011-05-25cAndreas Gohr Dokuwiki 2012-01-25Andreas Gohr Dokuwiki 2007-06-26Andreas Gohr Dokuwiki 2006-11-06Andreas Gohr Dokuwiki 2010-11-07aAndreas Gohr Dokuwiki 2009-12-25cAndreas Gohr Dokuwiki 2005-09-22Andreas Gohr Dokuwiki 2005-09-19Andreas Gohr DokuwikiAndreas Gohr Dokuwiki 2009-02-14bAndreas Gohr Dokuwiki 2008-05-05Andreas Gohr Dokuwiki 2007-07-13Andreas Gohr Dokuwiki 2005-07-01Andreas Gohr Dokuwiki 2011-05-25aAndreas Gohr Dokuwiki 2011-05-25Andreas Gohr Dokuwiki 2006-03-09Andreas Gohr Dokuwiki 2006-03-05
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook