Dokuwiki vulnerabilities

Products

• Dokuwiki 27

Newest

• dokuwiki DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition CVE-2026-113356 Fix available 7.7 HighOctober 20, 2026
• dokuwiki An issue in Dokuwiki v.2025-05-14b 'Librarian' allows a remote attacker to cause a denial of... CVE-2026-26477 Fix available 4.3 MediumApril 3, 2026
• dokuwiki Dokuwiki 2018-04-22b - Username Enumeration CVE-2019-25338 6.9 MediumFebruary 12, 2026
• dokuwiki An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a... CVE-2024-33103 Disputed 6.1 MediumApril 30, 2024
• dokuwiki DokuWiki before 2023-04-04a allows XSS via RSS titles. CVE-2023-34408 Fix available 5.4 MediumJune 5, 2023
• dokuwiki, splitbrain splitbrain/dokuwiki, fedoraproject fedora +2 more Cross-site Scripting (XSS) - Reflected in splitbrain/dokuwiki CVE-2022-3123 Fix available 5.4 MediumSeptember 5, 2022
• dokuwiki, fedoraproject fedora +1 more HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS)... CVE-2022-28919 Fix available 6.1 MediumMay 12, 2022
• dokuwiki ** DISPUTED ** CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins... CVE-2018-15474 Disputed 9.6 CriticalSeptember 7, 2018
• dokuwiki, debian linux +1 more The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode... CVE-2017-18123 Fix available 8.6 HighFebruary 3, 2018
• dokuwiki DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc... CVE-2017-12980 Fix available 6.1 MediumAugust 21, 2017
• dokuwiki DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code... CVE-2017-12979 Fix available 6.1 MediumAugust 21, 2017
• dokuwiki DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php. CVE-2017-12583 Fix available 6.1 MediumAugust 6, 2017
• dokuwiki DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of... CVE-2016-7965 Fix available 6.5 MediumOctober 31, 2016
• dokuwiki The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a... CVE-2016-7964 Fix available 8.6 HighOctober 31, 2016
• dokuwiki DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the... CVE-2015-2172 Fix available 6.5 MediumMarch 5, 2015
• dokuwiki, mageia +1 more The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki... CVE-2014-9253 Fix available 4.3 MediumDecember 17, 2014
• dokuwiki, mageia project mageia +1 more DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows... CVE-2014-8764 Fix available 5.0 MediumOctober 22, 2014
• dokuwiki, mageia project mageia +1 more DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote... CVE-2014-8763 Fix available 5.0 MediumOctober 22, 2014
• dokuwiki The ajax_mediadiff function in DokuWiki before 2014-05-05a allows remote attackers to access... CVE-2014-8762 Fix available 5.0 MediumOctober 22, 2014
• dokuwiki inc/template.php in DokuWiki before 2014-05-05a only checks for access to the root namespace,... CVE-2014-8761 Fix available 5.0 MediumOctober 22, 2014
• dokuwiki, fedoraproject fedora +1 more doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set,... CVE-2012-3354 Fix available 4.3 MediumNovember 20, 2012
• dokuwiki DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request... CVE-2011-3727 5.0 MediumSeptember 23, 2011
• dokuwiki Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05... CVE-2011-2510 Fix available 4.3 MediumJuly 14, 2011
• dokuwiki Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl... CVE-2010-0289 Fix available 6.8 MediumJanuary 22, 2010
• dokuwiki A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in... CVE-2010-0288 Public exploitFix available EPSS 10.7% 7.5 HighJanuary 22, 2010
• dokuwiki Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki... CVE-2010-0287 Public exploitFix available EPSS 10.8% 5.0 MediumJanuary 22, 2010
• dokuwiki inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is... CVE-2009-1960 Public exploitFix available EPSS 31.7% 9.3 HighJune 6, 2009