CVE:CVE-2010-0288
CNNVD:CNNVD-201002-148
DokuWiki是德国软件开发者Andreas Gohr所研发的一款基于PHP的Wiki引擎，它主要用于中小团队和个人网站知识库的管理，并提供版本控制、全文检索和权限控制等功能。
DokuWiki ACL管理插件(plugins/acl/ajax.php)中，管理员权限检查中的typo存在权限提升漏洞。远程攻击者可以通过编辑当前的ACL声明，获取权限，访问关闭的wikis。
solution:Upgrade dokuwiki dokuwiki to a higher version than release_2009-02-14,2004-07-04,2004-07-07,2004-07-12,2004-07-21,2004-07-25,2004-08-08,2004-08-15a,2004-08-22,2004-09-12,2004-09-25,2004-09-30,2004-11-01,2004-11-02,2004-11-10,2005-01-14,2005-01-15,2005-01-16a,2005-02-06,2005-02-18,2005-05-07,2005-07-01,2005-07-13,2005-09-19,2005-09-22,2006-03-05,2006-03-09,2006-03-09e,2006-06-04,and avoid the version (,release_2009-02-14],2004-07-04,2004-07-07,2004-07-12,2004-07-21,2004-07-25,2004-08-08,2004-08-15a,2004-08-22,2004-09-12,2004-09-25,2004-09-30,2004-11-01,2004-11-02,2004-11-10,2005-01-14,2005-01-15,2005-01-16a,2005-02-06,2005-02-18,2005-05-07,2005-07-01,2005-07-13,2005-09-19,2005-09-22,2006-03-05,2006-03-09,2006-03-09e,2006-06-04