DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dokuwiki | Andreas_gohr | release_2004-07-04 (including) | release_2004-07-04 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-07 (including) | release_2004-07-07 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-12 (including) | release_2004-07-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-21 (including) | release_2004-07-21 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-25 (including) | release_2004-07-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-08 (including) | release_2004-08-08 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-15a (including) | release_2004-08-15a (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-22 (including) | release_2004-08-22 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-12 (including) | release_2004-09-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-25 (including) | release_2004-09-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-30 (including) | release_2004-09-30 (including) |
References
- http://securitytracker.com/id?1011802
- http://wiki.splitbrain.org/wiki:old_changes
- http://www.osvdb.org/11005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17799
- http://securitytracker.com/id?1011802
- http://wiki.splitbrain.org/wiki:old_changes
- http://www.osvdb.org/11005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17799