| Package | Affected versions | Patched versions |
|---|---|---|
| dokuwiki | = 2005-07-01= 2005-09-19= 2005-09-22= 2006-03-05= 2006-03-09= 2006-11-06= 2007-06-26= 2007-07-13= 2008-05-05= 2009-02-14b= 2009-12-25c= 2010-11-07a= 2011-05-25= 2011-05-25a= 2011-05-25c= 2012-01-25≤ 2012-01-25a |
Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free