CVE-2011-3727

Published: Sep 23, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/index.php and certain other files.

Affected (1)

Products: Dokuwiki: Dokuwiki

Dokuwiki

1 product

Dokuwiki

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dokuwiki Dokuwiki	Version 2009-12-25c

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README

Source: cve@mitre.org

http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/dokuwiki-2009-12-25c

Source: cve@mitre.org

Exploit

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201301-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:073

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2011/06/27/6

Source: cve@mitre.org

http://www.securityfocus.com/bid/56328

Source: cve@mitre.org

http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README