CVE-2012-0283
 
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.
Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la función tpl_mediaFileList en inc/template.php en DokuWiki anterior a 2012-01-25b, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro ns en una acción medialist para lib/exe/ajax.php.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-12-30 CVE Reserved
- 2012-07-13 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (7)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/54439 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | <= 2012-01-25a Search vendor "Andreas Gohr" for product "Dokuwiki" and version " <= 2012-01-25a" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2005-07-01 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2005-07-01" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2005-09-19 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2005-09-19" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2005-09-22 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2005-09-22" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2006-03-05 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2006-03-05" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2006-03-09 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2006-03-09" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2006-11-06 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2006-11-06" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2007-06-26 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2007-06-26" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2007-07-13 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2007-07-13" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2008-05-05 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2008-05-05" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2009-02-14b Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2009-02-14b" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2009-12-25c Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2009-12-25c" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2010-11-07a Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2010-11-07a" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2011-05-25 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2011-05-25" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2011-05-25a Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2011-05-25a" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2011-05-25c Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2011-05-25c" | - |
Affected
| ||||||
Andreas Gohr Search vendor "Andreas Gohr" | Dokuwiki Search vendor "Andreas Gohr" for product "Dokuwiki" | 2012-01-25 Search vendor "Andreas Gohr" for product "Dokuwiki" and version "2012-01-25" | - |
Affected
|