4 matches found
CVE-2012-0283
Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...
CVE-2012-0283
DokuWiki vulnerability CVE-2012-0283: XSS in tpl_mediaFileList (inc/template.php) allows injection via the ns parameter in medialist action to lib/exe/ajax.php. Affected: DokuWiki releases prior to 2012-01-25b; exploit could deliver arbitrary HTML/script. Remediation: upgrade to the latest DokuWi...
CVE-2012-0283: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...