Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2006-2878
Disclosure Date: June 07, 2006 (last updated October 04, 2023)
The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.
0
Attacker Value
Unknown
CVE-2006-1165
Disclosure Date: March 12, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data."
0
Attacker Value
Unknown
CVE-2004-2559
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
0
Attacker Value
Unknown
CVE-2004-2560
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
0
