CVE:CVE-2012-0283
CNNVD:CNNVD-201207-188
DokuWiki是德国软件开发者Andreas Gohr所研发的一款基于PHP的Wiki引擎，它主要用于中小团队和个人网站知识库的管理，并提供版本控制、全文检索和权限控制等功能。
DokuWiki 2012-01-25b之前版本中的inc/template.php中的tpl_mediaFileList函数中存在跨站脚本（XSS）漏洞。远程攻击者可利用该漏洞通过在媒体列表操作lib/exe/ajax.php中的ns参数，注入任意web脚本或HTML。
solution:Upgrade andreas_gohr dokuwiki to a higher version than 2012-01-25a,2005-07-01,2005-09-19,2005-09-22,2006-03-05,2006-03-09,2006-11-06,2007-06-26,2007-07-13,2008-05-05,2009-02-14b,2009-12-25c,2010-11-07a,2011-05-25,2011-05-25a,2011-05-25c,2012-01-25,and avoid the version (,2012-01-25a],2005-07-01,2005-09-19,2005-09-22,2006-03-05,2006-03-09,2006-11-06,2007-06-26,2007-07-13,2008-05-05,2009-02-14b,2009-12-25c,2010-11-07a,2011-05-25,2011-05-25a,2011-05-25c,2012-01-25