Andreas Gohr's vulnerability profile centers on DokuWiki, a widely adopted lightweight wiki and documentation platform frequently deployed in enterprise and community settings. The recurring vulnerability patterns reflect the platform's web-facing nature and input-handling complexity, with weaknesses clustering around cross-site scripting, cross-site request forgery, and related web-application input-neutralization issues. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Andreas Gohr over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-2878HIGH The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted in | Jun 7, 2006 | 7.5 | 24 | NO | NO |
CVE-2012-2128MEDIUM Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authentication of administrators for requests that ad | Aug 27, 2012 | 6.8 | 21 | NO | NO |
CVE-2006-5099HIGH lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharac | Sep 29, 2006 | 7.5 | 20 | NO | NO |
CVE-2006-4674HIGH Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execute arbitrary PHP code via the X-FORWARDED-FOR HTTP header, wh | Sep 11, 2006 | 7.5 | 20 | NO | NO |
CVE-2006-4675HIGH Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspeci | Sep 11, 2006 | 7.5 | 20 | NO | NO |
CVE-2004-2560HIGH DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an | Dec 31, 2004 | 7.5 | 20 | NO | NO |
CVE-2004-2559HIGH DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly | Dec 31, 2004 | 7.5 | 19 | NO | NO |
CVE-2006-1165MEDIUM Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack | Mar 12, 2006 | 4.3 | 18 | NO | NO |
CVE-2012-0283MEDIUM Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script | Jul 13, 2012 | 4.3 | 17 | NO | NO |
CVE-2012-2129MEDIUM Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit | Aug 27, 2012 | 4.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Andreas Gohr.
Media articles that mention a CVE ID that affects a product developed by Andreas Gohr — matched by CVE ID, not by vendor name.