dokuwiki vulnerabilities (Debian)
37 vulnerabilities.
-
dokuwikiDebian DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition 7.7 High -
dokuwikiDebian An issue in Dokuwiki v.2025-05-14b 'Librarian' allows a remote attacker to cause a denial of... 4.3 Medium -
dokuwikiDebian Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote... 6.5 Medium -
dokuwikiDebian An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a... 6.1 Medium -
dokuwikiDebian DokuWiki before 2023-04-04a allows XSS via RSS titles. 5.4 Medium -
dokuwikiDebian HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS)... 6.1 Medium -
dokuwikiDebian The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode... 8.6 High -
dokuwikiDebian DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc... 6.1 Medium -
dokuwikiDebian DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code... 6.1 Medium -
dokuwikiDebian DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php. 6.1 Medium -
dokuwikiDebian DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of... 6.5 Medium -
dokuwikiDebian The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a... 8.6 High -
dokuwikiDebian DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the... 6.5 Medium -
dokuwikiDebian The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki... 4.3 Medium -
dokuwikiDebian DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows... 5.0 Medium -
dokuwikiDebian DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote... 5.0 Medium -
dokuwikiDebian The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access... 5.0 Medium -
dokuwikiDebian inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace,... 5.0 Medium -
dokuwikiDebian doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set,... 4.3 Medium -
dokuwikiDebian Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote... 4.3 Medium -
dokuwikiDebian ** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01... 6.8 Medium -
dokuwikiDebian Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in... 4.3 Medium -
dokuwikiDebian Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05... 4.3 Medium -
dokuwikiDebian Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl... 6.8 Medium -
dokuwikiDebian A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in... 7.5 High -
dokuwikiDebian Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki... 5.0 Medium -
dokuwikiDebian inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is... 9.3 High -
dokuwikiDebian ** DISPUTED ** The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi)... 7.5 High -
dokuwikiDebian CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier,... 4.3 Medium -
dokuwikiDebian lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use... 7.5 High -
dokuwikiDebian lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of... 5.0 Medium -
dokuwikiDebian DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers... 5.0 Medium -
dokuwikiDebian Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows... 7.5 High -
dokuwikiDebian Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows... 7.5 High -
dokuwikiDebian Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access... 4.0 Medium -
dokuwikiDebian The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to... 7.5 High -
dokuwikiDebian Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05... 4.3 Medium