CVE-2010-0287

dokuwiki 2009-12-25 - Multiple Vulnerabilities

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.

Vulnerabilidad de salto de directorio en el plugin ACL Manager (plugins/acl/ajax.php) de DokuWiki en versiones anteriores a la v2009-12-25b permite a usuarios remotos listar los contenidos de directorios de su elección a través de .. (punto punto) en el parámetro ns.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-01-12 CVE Reserved
2010-01-14 First Exploit
2010-01-23 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (12)

URL	Tag	Source
http://bugs.splitbrain.org/index.php?do=details&task_id=1847	X_refsource_confirm
http://www.securityfocus.com/bid/37821	Vdb Entry
http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security	X_refsource_confirm
http://www.vupen.com/english/advisories/2010/0150	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/55660	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/11141	2010-01-14
http://www.exploit-db.com/exploits/11141	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html	2019-09-23
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html	2019-09-23
http://secunia.com/advisories/38183	2019-09-23
http://security.gentoo.org/glsa/glsa-201301-07.xml	2019-09-23
http://www.debian.org/security/2010/dsa-1976	2019-09-23

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				<= release_2009-02-14 Search vendor "Dokuwiki" for product "Dokuwiki" and version " <= release_2009-02-14"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-07-04 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-04"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-07-07 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-07"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-07-12 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-12"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-07-21 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-21"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-07-25 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-25"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-08-08 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-08"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-08-15a Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-15a"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-08-22 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-22"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-09-12 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-12"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-09-25 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-25"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-09-30 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-30"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-11-01 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-01"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-11-02 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-02"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2004-11-10 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-10"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-01-14 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-14"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-01-15 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-15"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-01-16a Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-16a"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-02-06 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-02-06"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-02-18 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-02-18"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-05-07 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-05-07"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-07-01 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-07-01"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-07-13 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-07-13"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-09-19 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-09-19"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2005-09-22 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-09-22"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2006-03-05 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-05"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2006-03-09 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-09"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2006-03-09e Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-09e"		-		Affected
Dokuwiki Search vendor "Dokuwiki"		Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki"				2006-06-04 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-06-04"		-		Affected