CVE-2010-0289

Published: Feb 15, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors.

Affected (29)

Products: Dokuwiki: Dokuwiki

Dokuwiki

1 product

Dokuwiki

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Dokuwiki Dokuwiki	Up to release_2009-02-14
Dokuwiki Dokuwiki	Version 2004-07-04
Dokuwiki Dokuwiki	Version 2004-07-07
Dokuwiki Dokuwiki	Version 2004-07-12
Dokuwiki Dokuwiki	Version 2004-07-21
Dokuwiki Dokuwiki	Version 2004-07-25
Dokuwiki Dokuwiki	Version 2004-08-08
Dokuwiki Dokuwiki	Version 2004-08-15a
Dokuwiki Dokuwiki	Version 2004-08-22
Dokuwiki Dokuwiki	Version 2004-09-12
Dokuwiki Dokuwiki	Version 2004-09-25
Dokuwiki Dokuwiki	Version 2004-09-30
Dokuwiki Dokuwiki	Version 2004-11-01
Dokuwiki Dokuwiki	Version 2004-11-02
Dokuwiki Dokuwiki	Version 2004-11-10
Dokuwiki Dokuwiki	Version 2005-01-14
Dokuwiki Dokuwiki	Version 2005-01-15
Dokuwiki Dokuwiki	Version 2005-01-16a
Dokuwiki Dokuwiki	Version 2005-02-06
Dokuwiki Dokuwiki	Version 2005-02-18
Dokuwiki Dokuwiki	Version 2005-05-07
Dokuwiki Dokuwiki	Version 2005-07-01
Dokuwiki Dokuwiki	Version 2005-07-13
Dokuwiki Dokuwiki	Version 2005-09-19
Dokuwiki Dokuwiki	Version 2005-09-22
Dokuwiki Dokuwiki	Version 2006-03-05
Dokuwiki Dokuwiki	Version 2006-03-09
Dokuwiki Dokuwiki	Version 2006-03-09e
Dokuwiki Dokuwiki	Version 2006-06-04