https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:40:20.835993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-122931 EUVD-2026-122931 2026-10-08T16:40:20.841821+00:00 EUVD-2026-122931 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1960 fkie_cve-2009-1960 2026-10-08T16:40:20.841861+00:00

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.

 https://cve.radiocsirt.org/vuln/ghsa-hm24-p578-9g92 GHSA-hm24-p578-9g92 2026-10-08T16:40:20.841897+00:00

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.

 https://cve.radiocsirt.org/vuln/gsd-2009-1960 gsd-2009-1960 2026-10-08T16:40:20.841915+00:00 gsd-2009-1960 https://cve.radiocsirt.org/vuln/ubuntu-cve-2009-1960 Withdrawn: UBUNTU-CVE-2009-1960 2026-10-08T16:40:20.841926+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: dokuwiki, Ubuntu:16.04:LTS: dokuwiki

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.