166 matches found
Gentoo Security Advisory GLSA 200606-16 (DokuWiki)
The remote host is missing updates announced in advisory GLSA 200606-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DokuWiki: PHP code injection
Background DokuWiki is a simple to use wiki targeted at developer teams, workgroups and small companies. Description Stefan Esser discovered that the DokuWiki spell checker fails to properly sanitize PHP's "complex curly syntax". Impact A unauthenticated remote attacker may execute arbitrary PHP...
Immunity Canvas: DOKUWIKI_EXEC
Name| dokuwikiexec ---|--- CVE| CVE-2006-2878 Exploit Pack| CANVAS Description| DokuWiki Spell Checker Embedded Link Arbitrary PHP Code Execution Notes| CVE Name: CVE-2006-2878 VENDOR: DokuWiki Repeatability: Infinite References: 'http://www.hardened-php.net/advisory042006.119.html' CVSS: 7.5 DOR...
CVE-2002-1650
CVE-2002-1650 impacts SquirrelMail’s spell checker plugin (check_me.mod.php) in all releases before 1.2.3. The underlying issue is a flaw in handling the sqspell_command parameter, which allows remote attackers to execute arbitrary commands. The vulnerability enables remote code execution with ne...
