CVE-2012-2129

概要

参考情報

• bugs.dokuwiki.org/index.php
• ircrash.com/uploads/dokuwiki.txt · Exploit
• seclists.org/bugtraq/2012/Apr/121
• secunia.com/advisories/48848
• openwall.com/lists/oss-security/2012/04/22/4
• openwall.com/lists/oss-security/2012/04/23/1
• securityfocus.com/bid/53041
• bugs.gentoo.org/show_bug.cgi
• bugzilla.redhat.com/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/74907
• splitbrain/dokuwiki commit ff71173

dokuwiki のその他の脆弱性

• CVE-2012-2128中 6.8Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authenticatio…
• CVE-2012-0283中 4.3Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote …
• CVE-2006-6965中 4.3CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary…
• CVE-2006-5099高 7.5lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute…
• CVE-2006-5098中 5.0lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h p…