Gentoo Security Advisory GLSA 200609-10 (dokuwiki)

The remote host is missing updates announced in advisory GLSA 200609-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200609-10 : DokuWiki: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200609-10 DokuWiki: Arbitrary command execution 'rgod' discovered that DokuWiki doesn't sanitize the X-FORWARDED-FOR HTTP header, allowing the injection of arbitrary contents - such as PHP commands - into a file. Additionally, the...