Vulnerabilities > Andreas Gohr > Dokuwiki > 2012.01.25
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-08-27 | CVE-2012-2129 | Cross-Site Scripting vulnerability in Andreas Gohr Dokuwiki 20120125 Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action. | 4.3 |
2012-07-13 | CVE-2012-0283 | Cross-Site Scripting vulnerability in Andreas Gohr Dokuwiki Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php. | 4.3 |