DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Dokuwiki | Andreas_gohr | release_2004-07-04 (including) | release_2004-07-04 (including) |
Dokuwiki | Andreas_gohr | release_2004-07-07 (including) | release_2004-07-07 (including) |
Dokuwiki | Andreas_gohr | release_2004-07-12 (including) | release_2004-07-12 (including) |
Dokuwiki | Andreas_gohr | release_2004-07-21 (including) | release_2004-07-21 (including) |
Dokuwiki | Andreas_gohr | release_2004-07-25 (including) | release_2004-07-25 (including) |
Dokuwiki | Andreas_gohr | release_2004-08-08 (including) | release_2004-08-08 (including) |
Dokuwiki | Andreas_gohr | release_2004-08-15a (including) | release_2004-08-15a (including) |
Dokuwiki | Andreas_gohr | release_2004-08-22 (including) | release_2004-08-22 (including) |
Dokuwiki | Andreas_gohr | release_2004-09-12 (including) | release_2004-09-12 (including) |
Dokuwiki | Andreas_gohr | release_2004-09-25 (including) | release_2004-09-25 (including) |
Dokuwiki | Andreas_gohr | release_2004-09-30 (including) | release_2004-09-30 (including) |