DokuWiki rc2009-01-30

CPE Details

DokuWiki rc2009-01-30
dokuwiki
dokuwiki
rc2009-01-30
2009-06-08
16h12 +00:00
2012-12-21
15h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:dokuwiki:dokuwiki:rc2009-01-30:*:*:*:*:*:*:*

Informations

Vendor

dokuwiki

Product

dokuwiki

Version

rc2009-01-30

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2010-0287 2010-02-15 17h00 +00:00 Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.
5
CVE-2010-0288 2010-02-15 17h00 +00:00 A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
7.5
CVE-2010-0289 2010-02-15 17h00 +00:00 Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors.
6.8
CVE-2009-1960 2009-06-06 16h00 +00:00 inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
9.3