CVE-2012-3354
- State
- Published
- Severity
- Not scored
- Published
- Nov 20, 2012
- Updated
- Aug 6, 2024
- Reserved
- Jun 14, 2012
Description
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20120624 Re: CVE request: Full path disclosure in DokuWikimailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=835145
- MDVSA-2013:073vendor-advisory
- [oss-security] 20120624 CVE request: Full path disclosure in DokuWikimailing-list
- FEDORA-2012-16550vendor-advisory
- FEDORA-2012-16605vendor-advisory
- FEDORA-2012-16614vendor-advisory
- http://www.freelists.org/post/dokuwiki/Fwd-DokuWiki-Full-path-disclosure
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.