← Database

CVE-2010-0287

MEDIUM CVSS: 5.0 Published: 2010-02-15 Modified: 2026-06-16

Description

Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.

Affected Platforms

Dokuwiki Dokuwiki

Weakness Type

CWE-22

References