| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-0287 | 5.0 |
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.
|
23-09-2019 - 18:13 | 15-02-2010 - 18:30 | |
| CVE-2010-0288 | 7.5 |
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the
|
23-09-2019 - 18:13 | 15-02-2010 - 18:30 | |
| CVE-2010-0289 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control r
|
23-09-2019 - 18:13 | 15-02-2010 - 18:30 | |
| CVE-2011-2510 | 4.3 |
Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link.
|
29-08-2017 - 01:29 | 14-07-2011 - 23:55 | |
| CVE-2011-3727 | 5.0 |
DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files.
|
13-12-2013 - 04:52 | 23-09-2011 - 23:55 | |
| CVE-2012-0283 | 4.3 |
Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.ph
|
22-08-2013 - 03:50 | 13-07-2012 - 21:55 |