Hacker News Reader

Comment by splitbrain | Hacker News Reader

DokuWiki lead developer here. I've contacted the PHP guys but haven't heard back, yet. We have no details of the breach so far. The Google cache of the page indicates that it was an outdated DokuWiki version, but we simply don't know.

There are no known vulnerabilities in current DokuWiki. As soon as we learn about the nature of the problem we will release a security update if needed.

View on HN

Thanks for the followup :-)

Edit: For anyone else who's curious, here's what I'm seeing from the Google cache:

    <meta name="generator" content="DokuWiki Release 2008-05-05" />

There appear to have been three major releases of DokuWiki since then, so the vector could have been a previously fixed vulnerability.

I was looking for this too. Must suck to be named as the source of a breakin and not have any more information.

Reply on news.ycombinator.com