News Feed
Jobs Feed
Sections



Recent Jobs

News Archive
Stefan Esser's Blog:
DokuWiki remote PHP code injection
by Chris Cornutt June 05, 2006 @ 06:08:12

Stefan Esser has posted this new security issue he discovered in the DokuWiki application.

While searching for the perfect Wiki PHP application for my own german/korean wiki I tested DokuWiki and found an ugly security hole, that allows remote PHP code injection through it's AJAX spellchecking service.

You can read up on his full advisory here, including the location/code of the issue.

0 comments voice your opinion now!
remote injection security advisory dokuwiki remote injection security advisory dokuwiki




Community Events





Don't see your event here?
Let us know!

conference unittest framework release introduction development api custom symfony2 language application test phpunit manifesto security opinion series podcast interview community

All content copyright, 2012 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework