The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dokuwiki | Jul 30, 2024 | Jun 8, 2009 |
| Freebsd | — | Upgrade dokuwikiUpgrade dokuwiki-devel | Dec 10, 2025 | Jun 4, 2009 |
| Gentoo Linux | — | Upgrade www-apps/dokuwiki. | Oct 30, 2017 | Jun 7, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub