CVE-2010-0288
dokuwiki 2009-12-25 - Multiple Vulnerabilities
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
Una errata en el check del permiso de administrador del plugin ACL Manager (plugins/acl/ajax.php) de DokuWiki en versiones anteriores a la v2009-12-25b permite a atacantes remotos obtener privlegios y acceder a wikis cerrados editando las restricciones de ACL actuales, como se ha demostrado en Enero del 2010.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-01-12 CVE Reserved
- 2010-01-14 First Exploit
- 2010-01-23 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (13)
URL | Tag | Source |
---|---|---|
http://bugs.splitbrain.org/index.php?do=details&task_id=1847 | X_refsource_confirm | |
http://osvdb.org/61710 | Vdb Entry | |
http://www.securityfocus.com/bid/37820 | Vdb Entry | |
http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security | X_refsource_confirm | |
http://www.vupen.com/english/advisories/2010/0150 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/55661 | Vdb Entry |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/11141 | 2010-01-14 | |
http://www.exploit-db.com/exploits/11141 | 2024-08-07 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | <= release_2009-02-14 Search vendor "Dokuwiki" for product "Dokuwiki" and version " <= release_2009-02-14" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-07-04 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-04" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-07-07 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-07" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-07-12 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-12" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-07-21 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-21" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-07-25 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-07-25" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-08-08 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-08" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-08-15a Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-15a" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-08-22 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-08-22" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-09-12 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-12" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-09-25 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-25" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-09-30 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-09-30" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-11-01 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-01" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-11-02 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-02" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2004-11-10 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2004-11-10" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-01-14 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-14" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-01-15 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-15" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-01-16a Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-01-16a" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-02-06 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-02-06" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-02-18 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-02-18" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-05-07 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-05-07" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-07-01 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-07-01" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-07-13 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-07-13" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-09-19 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-09-19" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2005-09-22 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2005-09-22" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2006-03-05 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-05" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2006-03-09 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-09" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2006-03-09e Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-03-09e" | - |
Affected
| ||||||
Dokuwiki Search vendor "Dokuwiki" | Dokuwiki Search vendor "Dokuwiki" for product "Dokuwiki" | 2006-06-04 Search vendor "Dokuwiki" for product "Dokuwiki" and version "2006-06-04" | - |
Affected
|