CVE-2004-2559

Description

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.

Affected products

• andreas_gohr / dokuwikirelease_2004-07-04 – release_2004-07-04
• andreas_gohr / dokuwikirelease_2004-07-07 – release_2004-07-07
• andreas_gohr / dokuwikirelease_2004-07-12 – release_2004-07-12
• andreas_gohr / dokuwikirelease_2004-07-21 – release_2004-07-21
• andreas_gohr / dokuwikirelease_2004-07-25 – release_2004-07-25
• andreas_gohr / dokuwikirelease_2004-08-08 – release_2004-08-08
• andreas_gohr / dokuwikirelease_2004-08-15a – release_2004-08-15a
• andreas_gohr / dokuwikirelease_2004-08-22 – release_2004-08-22
• andreas_gohr / dokuwikirelease_2004-09-12 – release_2004-09-12
• andreas_gohr / dokuwikirelease_2004-09-25 – release_2004-09-25
• andreas_gohr / dokuwikirelease_2004-09-30 – release_2004-09-30

References

• MISChttp://securitytracker.com/id?1011802
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17799
• MISChttp://www.osvdb.org/11005
• MISChttp://wiki.splitbrain.org/wiki:old_changes