Information Disclosure in DokuWiki by DokuWiki GmbH
CVE-2011-3727

Currently unrated

Key Information:

Vendor

Dokuwiki

Status
Dokuwiki
Vendor
CVE Published:
23 September 2011

What is CVE-2011-3727?

The vulnerability in DokuWiki versions prior to the fixed release allows remote attackers to access sensitive information. By making direct requests to certain .php files, such as lib/tpl/index.php, attackers can reveal the installation path through error messages. This exposure may lead to further exploits if the environment is not properly secured.

References

http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://security.gentoo.org/glsa/glsa-201301-07.xml
vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2011/06/27/6
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.