DokuWiki 漏洞列表

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATE_AT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATE_AT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

DokuWiki is susceptible to the Installation page exposure due to misconfiguration.

DokuWiki开源维基引擎存在XSS漏洞，该漏洞允许攻击者在受影响站点上下文中在不知情的用户的浏览器中执行任意脚本代码。这允许攻击者窃取基于cookie的身份验证凭证并发起其他攻击

DokuWiki是一个开源维基引擎，在开源代码托管平台有3.5k的start，该系统存在反射形xss漏洞。

DokuWiki 2004-10-19之前的版本在用于允许基于文件拓展名的执行的web服务器时存在漏洞。远程攻击者可以通过上传带有适当拓展名（如：".php"或".cgi"）的文件来执行任意代码。