CVE-2006-4679
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers...
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
Exploit likelihood
What each source reports
NVD Score used
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
CVE-2006-4679- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
CVE-2006-4679- Updated
- 2026-11-02
EUVDEUVD-2006-4667 No score
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
EUVD-2006-4667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v3v7-2m7q-j6jq No score
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers...
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
GHSA-v3v7-2m7q-j6jq- Updated
- 2026-11-02
OSV No score
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
CVE-2006-4679- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4679 No score
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
- Record
DEBIAN-CVE-2006-4679- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4679 is a medium vulnerability (CVSS 5.0) in Andreas Gohr Dokuwiki, published September 11, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.69%, the 77th percentile. Fixed in dokuwiki 0.0.20060309-5.1.
References
retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html
securityreason.com/securityalert/1537
exchange.xforce.ibmcloud.com/vulnerabilities/28819
security.gentoo.org/glsa/glsa-200609-10.xml
secunia.com/advisories/21936
securityfocus.com/archive/1/445516/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2006-4679
github.com/advisories/GHSA-v3v7-2m7q-j6jq
security-tracker.debian.org/tracker/CVE-2006-4679