CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0283

Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-0283

Andreas Gohr » Dokuwiki » Version: Any

cpe:2.3:a:andreas_gohr:dokuwiki:*
Andreas Gohr » Dokuwiki » Version: 2005-07-01

cpe:2.3:a:andreas_gohr:dokuwiki:2005-07-01
Andreas Gohr » Dokuwiki » Version: 2005-09-19

cpe:2.3:a:andreas_gohr:dokuwiki:2005-09-19
Andreas Gohr » Dokuwiki » Version: 2005-09-22

cpe:2.3:a:andreas_gohr:dokuwiki:2005-09-22
Andreas Gohr » Dokuwiki » Version: 2006-03-05

cpe:2.3:a:andreas_gohr:dokuwiki:2006-03-05
Andreas Gohr » Dokuwiki » Version: 2006-03-09

cpe:2.3:a:andreas_gohr:dokuwiki:2006-03-09
Andreas Gohr » Dokuwiki » Version: 2006-11-06

cpe:2.3:a:andreas_gohr:dokuwiki:2006-11-06
Andreas Gohr » Dokuwiki » Version: 2007-06-26

cpe:2.3:a:andreas_gohr:dokuwiki:2007-06-26
Andreas Gohr » Dokuwiki » Version: 2007-07-13

cpe:2.3:a:andreas_gohr:dokuwiki:2007-07-13
Andreas Gohr » Dokuwiki » Version: 2008-05-05

cpe:2.3:a:andreas_gohr:dokuwiki:2008-05-05
Andreas Gohr » Dokuwiki » Version: 2009-02-14b

cpe:2.3:a:andreas_gohr:dokuwiki:2009-02-14b
Andreas Gohr » Dokuwiki » Version: 2009-12-25c

cpe:2.3:a:andreas_gohr:dokuwiki:2009-12-25c
Andreas Gohr » Dokuwiki » Version: 2010-11-07a

cpe:2.3:a:andreas_gohr:dokuwiki:2010-11-07a
Andreas Gohr » Dokuwiki » Version: 2011-05-25

cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25
Andreas Gohr » Dokuwiki » Version: 2011-05-25a

cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25a
Andreas Gohr » Dokuwiki » Version: 2011-05-25c

cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25c
Andreas Gohr » Dokuwiki » Version: 2012-01-25

cpe:2.3:a:andreas_gohr:dokuwiki:2012-01-25

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0283

Products

Pricing

Contact Us