{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-07-13T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-07-25T09:00:00", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "54439", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/54439"}, {"name": "GLSA-201301-07", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-201301-07.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.dokuwiki.org/index.php?do=details&task_id=2561"}, {"name": "FEDORA-2012-16550", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html"}, {"name": "FEDORA-2012-16605", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html"}, {"name": "FEDORA-2012-16614", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2012-24/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2012-0283", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "54439", "refsource": "BID", "url": "http://www.securityfocus.com/bid/54439"}, {"name": "GLSA-201301-07", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201301-07.xml"}, {"name": "http://bugs.dokuwiki.org/index.php?do=details&task_id=2561", "refsource": "CONFIRM", "url": "http://bugs.dokuwiki.org/index.php?do=details&task_id=2561"}, {"name": "FEDORA-2012-16550", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html"}, {"name": "FEDORA-2012-16605", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html"}, {"name": "FEDORA-2012-16614", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html"}, {"name": "http://secunia.com/secunia_research/2012-24/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2012-24/"}]}}}}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2012-0283", "datePublished": "2012-07-13T21:00:00", "dateReserved": "2011-12-30T00:00:00", "dateUpdated": "2012-07-25T09:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:*:*:*:*:*:*:*:*", "matchCriteriaId": "12B16E9B-CC3A-4300-B353-363A8B7EB446", "versionEndIncluding": "2012-01-25a", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2005-07-01:*:*:*:*:*:*:*", "matchCriteriaId": "D021EAF4-D850-460C-ABD9-24384F272202", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2005-09-19:*:*:*:*:*:*:*", "matchCriteriaId": "0D500736-2E65-4942-BB14-87E8400DF432", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2005-09-22:*:*:*:*:*:*:*", "matchCriteriaId": "FE9F3578-5DD7-4C23-A05E-1B69A3DE1131", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2006-03-05:*:*:*:*:*:*:*", "matchCriteriaId": "04F84AF0-7A64-4044-84A5-93A04292B49F", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2006-03-09:*:*:*:*:*:*:*", "matchCriteriaId": "721A76A3-A352-4BFE-988A-8E7493801821", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2006-11-06:*:*:*:*:*:*:*", "matchCriteriaId": "25638BDF-056E-40FD-AF69-75E7D6A0AFEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2007-06-26:*:*:*:*:*:*:*", "matchCriteriaId": "79D062E1-A814-47CF-A5B8-1F1126903538", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2007-07-13:*:*:*:*:*:*:*", "matchCriteriaId": "F31C0B00-5A0F-4FB7-8410-5946F5F90159", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2008-05-05:*:*:*:*:*:*:*", "matchCriteriaId": "9DD798EB-EFA7-4E29-AB93-E4DED45BA639", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2009-02-14b:*:*:*:*:*:*:*", "matchCriteriaId": "1D6DCFD7-4768-4EFF-A58F-05B3A21ABEB7", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2009-12-25c:*:*:*:*:*:*:*", "matchCriteriaId": "17804D28-62D1-4DF5-BF32-C4C7FAE76094", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2010-11-07a:*:*:*:*:*:*:*", "matchCriteriaId": "FDFB8409-5B32-4511-A26B-95D5F6159564", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25:*:*:*:*:*:*:*", "matchCriteriaId": "8F4F37E4-BF85-4385-A71C-D9B1ACDE1906", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25a:*:*:*:*:*:*:*", "matchCriteriaId": "C568179A-1008-4428-8F7B-0FF40D2627EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2011-05-25c:*:*:*:*:*:*:*", "matchCriteriaId": "CBACBE66-DDDF-4783-8E9F-CA488E79326E", "vulnerable": true}, {"criteria": "cpe:2.3:a:andreas_gohr:dokuwiki:2012-01-25:*:*:*:*:*:*:*", "matchCriteriaId": "266A9481-905C-4F8B-943B-73F023EC851A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en la funci\u00f3n tpl_mediaFileList en inc/template.php en DokuWiki anterior a 2012-01-25b, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del par\u00e1metro ns en una acci\u00f3n medialist para lib/exe/ajax.php."}], "id": "CVE-2012-0283", "lastModified": "2013-08-22T03:50:41.290", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-07-13T21:55:02.297", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://bugs.dokuwiki.org/index.php?do=details&task_id=2561"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090755.html"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090899.html"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090938.html"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2012-24/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://security.gentoo.org/glsa/glsa-201301-07.xml"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/54439"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}