Privilege Escalation Vulnerability in DokuWiki's ACL Manager Plugin
CVE-2010-0288
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%
What is CVE-2010-0288?
A flaw in the ACL Manager plugin for DokuWiki, specifically in the administrator permission check, allows remote attackers to manipulate current ACL statements. This exploitation grants unauthorized access to closed wikis, thereby compromising sensitive information and the integrity of the wiki's access controls. This vulnerability was active in the wild, demonstrating the risk to users of the affected DokuWiki version prior to the December 25, 2009, release.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.