Gentoo Security Advisory GLSA 200704-08 (dokuwiki)

The remote host is missing updates announced in advisory GLSA 200704-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-6965

CVE-2006-6965 affects DokuWiki (2006-03-09e and possibly earlier) and is a CRLF injection in lib/exe/fetch.php via the media parameter. This allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting, with potential XSS impact. Multiple advisories corroborate the...