![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2006-4679 |
Description: | DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug". |
Test IDs: | None available |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2006-4679 Bugtraq: 20060907 DokuWiki <= 2006-03-09brel /bin/dwpage.php remote commands execution (Google Search) http://www.securityfocus.com/archive/1/445516/100/0/threaded http://security.gentoo.org/glsa/glsa-200609-10.xml http://retrogod.altervista.org/dokuwiki_2006-03-09b_cmd.html http://secunia.com/advisories/21936 http://securityreason.com/securityalert/1537 XForce ISS Database: dokuwiki-doku-information-disclosure(28819) https://exchange.xforce.ibmcloud.com/vulnerabilities/28819 |