VDB

GCVE-110-MAGEIA-2018-67

GCVE-110-MAGEIA-2018-67
Advisory Published
Vulnetix · Advisory published January 11, 2018
DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php and updated package is fixed by added patch from upstream.

Affected Products

VendorProductVersionsPlatforms
Mageiaqtwebview50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqt3d50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtwebsockets50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtwebengine50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtbase50 (affected), 5.9.4-1.1.mga6 (unaffected)—
Mageiaqtspeech50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqttools50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtcanvas3d50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtimageformats50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtserialbus50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtgamepad55.9.4-1.mga6 (unaffected), 0 (affected)—
Mageiaqtxmlpatterns50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtx11extras55.9.4-1.mga6 (unaffected), 0 (affected)—
Mageiaqtscxml50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtremoteobjects50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtdatavis3d50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtpurchasing50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtserialport50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiadokuwiki0 (affected), 20170219-4.1.mga6 (unaffected), 20170219-4.1.mga6 (unaffected), 0 (affected)—
Mageiaqtsvg50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtdeclarative50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtgraphicaleffects50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtmultimedia50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtlocation55.9.4-1.mga6 (unaffected), 0 (affected)—
Mageiaqtwayland50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtconnectivity50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqttranslations50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtdoc55.9.4-1.mga6 (unaffected), 0 (affected)—
Mageiaqtquickcontrols50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtwebchannel50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtquickcontrols250 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtsensors50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtscript55.9.4-1.mga6 (unaffected), 0 (affected)—
Mageiaqtnetworkauth50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtcharts50 (affected), 5.9.4-1.mga6 (unaffected)—
Mageiaqtvirtualkeyboard50 (affected), 5.9.4-1.mga6 (unaffected)—

Browse GCVE Records

6,043 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›