3 matches found
CVE-2014-9253
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...
PT-2014-8907
Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2014-09-29b Description The issue allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file and then accessing it via the "media" parameter to "lib/exe/fetch.php". This is due to the...
CVE-2014-9253: Improper Neutralization of Input During Web Page Generation
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...