CVEvulnerability

CVE-2012-0283

4.3 MEDIUM Published 2012-07-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.

Affected configurations

• andreas gohr dokuwiki (<= 2012-01-25a) • andreas gohr dokuwiki 2005-07-01 • andreas gohr dokuwiki 2005-09-19 • andreas gohr dokuwiki 2005-09-22 • andreas gohr dokuwiki 2006-03-05 • andreas gohr dokuwiki 2006-03-09 • andreas gohr dokuwiki 2006-11-06 • andreas gohr dokuwiki 2007-06-26 • andreas gohr dokuwiki 2007-07-13 • andreas gohr dokuwiki 2008-05-05 • andreas gohr dokuwiki 2009-02-14b • andreas gohr dokuwiki 2009-12-25c • andreas gohr dokuwiki 2010-11-07a • andreas gohr dokuwiki 2011-05-25 • andreas gohr dokuwiki 2011-05-25a • andreas gohr dokuwiki 2011-05-25c • andreas gohr dokuwiki 2012-01-25

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References