The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via complex curly syntax that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dokuwiki | Andreas_gohr | * | release_2006-06-04 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-04 (including) | release_2004-07-04 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-07 (including) | release_2004-07-07 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-12 (including) | release_2004-07-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-21 (including) | release_2004-07-21 (including) |
| Dokuwiki | Andreas_gohr | release_2004-07-25 (including) | release_2004-07-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-08 (including) | release_2004-08-08 (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-15a (including) | release_2004-08-15a (including) |
| Dokuwiki | Andreas_gohr | release_2004-08-22 (including) | release_2004-08-22 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-12 (including) | release_2004-09-12 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-25 (including) | release_2004-09-25 (including) |
| Dokuwiki | Andreas_gohr | release_2004-09-30 (including) | release_2004-09-30 (including) |
| Dokuwiki | Andreas_gohr | release_2004-10-19 (including) | release_2004-10-19 (including) |
| Dokuwiki | Andreas_gohr | release_2004-11-01 (including) | release_2004-11-01 (including) |
| Dokuwiki | Andreas_gohr | release_2004-11-02 (including) | release_2004-11-02 (including) |
| Dokuwiki | Andreas_gohr | release_2004-11-10 (including) | release_2004-11-10 (including) |
| Dokuwiki | Andreas_gohr | release_2005-01-14 (including) | release_2005-01-14 (including) |
| Dokuwiki | Andreas_gohr | release_2005-01-15 (including) | release_2005-01-15 (including) |
| Dokuwiki | Andreas_gohr | release_2005-01-16a (including) | release_2005-01-16a (including) |
| Dokuwiki | Andreas_gohr | release_2005-02-06 (including) | release_2005-02-06 (including) |
| Dokuwiki | Andreas_gohr | release_2005-02-18 (including) | release_2005-02-18 (including) |
| Dokuwiki | Andreas_gohr | release_2005-05-07 (including) | release_2005-05-07 (including) |
| Dokuwiki | Andreas_gohr | release_2005-07-01 (including) | release_2005-07-01 (including) |
| Dokuwiki | Andreas_gohr | release_2005-07-13 (including) | release_2005-07-13 (including) |
| Dokuwiki | Andreas_gohr | release_2005-09-19 (including) | release_2005-09-19 (including) |
| Dokuwiki | Andreas_gohr | release_2005-09-22 (including) | release_2005-09-22 (including) |
| Dokuwiki | Andreas_gohr | release_2006-03-05 (including) | release_2006-03-05 (including) |
| Dokuwiki | Ubuntu | dapper | * |
| Dokuwiki | Ubuntu | devel | * |
| Dokuwiki | Ubuntu | edgy | * |
| Dokuwiki | Ubuntu | feisty | * |
| Dokuwiki | Ubuntu | gutsy | * |
| Dokuwiki | Ubuntu | hardy | * |
| Dokuwiki | Ubuntu | intrepid | * |
| Dokuwiki | Ubuntu | jaunty | * |
| Dokuwiki | Ubuntu | karmic | * |
| Dokuwiki | Ubuntu | upstream | * |