Lucene search
MitreCVELIST:CVE-2009-1960HistoryJun 06, 2009 - 6:00 p.m.
CVE-2009-1960
2009-06-0618:00:00
mitre
www.cve.org
3
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
References
bugs.splitbrain.org/index.php?do=details&task_id=1700
dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz
secunia.com/advisories/35218
www.securityfocus.com/bid/35095
www.exploit-db.com/exploits/8781
www.exploit-db.com/exploits/8812
Related
ubuntucve
ubuntucve
CVE-2009-1960
2009-06-08 00:00:00
exploitdb
exploitdb
Dokuwiki 2009-02-14 - Local File Inclusion
2009-05-26 00:00:00
Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion
2009-05-26 00:00:00
openvas
openvas
FreeBSD Ports: dokuwiki
2009-06-09 00:00:00
Gentoo Security Advisory GLSA 200908-09 (dokuwiki)
2009-09-02 00:00:00
DokuWiki 'doku.php' Local File Inclusion Vulnerability
2009-06-19 00:00:00
nessus
nessus
GLSA-200908-09 : DokuWiki: Local file inclusion
2009-08-20 00:00:00
DokuWiki config_cascade Parameter Remote File Inclusion
2009-05-27 00:00:00
freebsd
freebsd
dokuwiki -- Local File Inclusion with register_globals on
2009-05-26 00:00:00
prion
prion
Remote file inclusion
2009-06-08 01:00:00
canvas
canvas
Immunity Canvas: DOKUWIKI_EXEC2
2009-06-08 01:00:00
gentoo
gentoo
DokuWiki: Local file inclusion
2009-08-18 00:00:00
nvd
nvd
CVE-2009-1960
2009-06-08 01:00:00
debiancve
debiancve
CVE-2009-1960
2009-06-08 01:00:00
cve
cve
CVE-2009-1960
2009-06-08 01:00:00