CVE-2012-3354
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set,...
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
Exploit likelihood
What each source reports
NVD Score used
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
CVE-2012-3354- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
CVE-2012-3354- Updated
- 2026-11-02
EUVDEUVD-2012-3331 No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
EUVD-2012-3331- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9q66-mr67-3695 No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set,...
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
GHSA-9q66-mr67-3695- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
CVE-2012-3354- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3354 No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
DEBIAN-CVE-2012-3354- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-3354 No score
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
- Record
UBUNTU-CVE-2012-3354- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3354 is a medium vulnerability (CVSS 4.3) in Dokuwiki, published November 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. Fixed in dokuwiki 0.0.20130510a-1.
References
openwall.com/lists/oss-security/2012/06/25/2
bugzilla.redhat.com/show_bug.cgi?id=835145
mandriva.com/security/advisories?name=MDVSA-2013:073
lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html
Show 7 moreShow less
freelists.org/post/dokuwiki/Fwd-DokuWiki-Full-path-disclosure
nvd.nist.gov/vuln/detail/CVE-2012-3354
github.com/advisories/GHSA-9q66-mr67-3695
security-tracker.debian.org/tracker/CVE-2012-3354
ubuntu.com/security/CVE-2012-3354
cve.org/CVERecord?id=CVE-2012-3354