6.8
CVSSv2

CVE-2010-0289

Published: 15/02/2010 Updated: 23/09/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki prior to 2009-12-25c allow remote malicious users to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

dokuwiki dokuwiki 2006-06-04

dokuwiki dokuwiki 2005-05-07

dokuwiki dokuwiki 2005-02-18

dokuwiki dokuwiki 2004-11-01

dokuwiki dokuwiki 2004-09-30

dokuwiki dokuwiki 2004-07-21

dokuwiki dokuwiki 2004-07-12

dokuwiki dokuwiki 2005-07-13

dokuwiki dokuwiki 2005-07-01

dokuwiki dokuwiki 2004-11-10

dokuwiki dokuwiki 2004-11-02

dokuwiki dokuwiki 2004-08-08

dokuwiki dokuwiki 2004-07-25

dokuwiki dokuwiki 2006-03-09e

dokuwiki dokuwiki 2006-03-09

dokuwiki dokuwiki 2005-02-06

dokuwiki dokuwiki 2005-01-16a

dokuwiki dokuwiki 2004-09-25

dokuwiki dokuwiki 2004-09-12

dokuwiki dokuwiki 2004-07-07

dokuwiki dokuwiki 2004-07-04

dokuwiki dokuwiki

dokuwiki dokuwiki 2006-03-05

dokuwiki dokuwiki 2005-09-22

dokuwiki dokuwiki 2005-09-19

dokuwiki dokuwiki 2005-01-15

dokuwiki dokuwiki 2005-01-14

dokuwiki dokuwiki 2004-08-22

dokuwiki dokuwiki 2004-08-15a

Vendor Advisories

Debian Bug report logs - #565406 ACL can be edited Package: dokuwiki; Maintainer for dokuwiki is Tanguy Ortolo <tanguy+debian@ortoloeu>; Source for dokuwiki is src:dokuwiki (PTS, buildd, popcon) Reported by: "Adrian Lang" <debian@adrianlangde> Date: Fri, 15 Jan 2010 14:18:02 UTC Severity: serious Tags: fixed-upstr ...