Hacker News Reader

Comment by nbpoole | Hacker News Reader

Does anybody know what version of DokuWiki was being run? I'd be interested to know whether this was a 0-day exploit (and if so when DokuWiki will be patched).

View on HN

DokuWiki lead developer here. I've contacted the PHP guys but haven't heard back, yet. We have no details of the breach so far. The Google cache of the page indicates that it was an outdated DokuWiki version, but we simply don't know.

There are no known vulnerabilities in current DokuWiki. As soon as we learn about the nature of the problem we will release a security update if needed.

Thanks for the followup :-)

Edit: For anyone else who's curious, here's what I'm seeing from the Google cache:

    <meta name="generator" content="DokuWiki Release 2008-05-05" />

There appear to have been three major releases of DokuWiki since then, so the vector could have been a previously fixed vulnerability.

I was looking for this too. Must suck to be named as the source of a breakin and not have any more information.

Reply on news.ycombinator.com