Unrated severityNVD Advisory· Published Jan 29, 2007· Updated Jun 16, 2026

CVE-2006-6965

Description

CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the media parameter. NOTE: this issue can be leveraged for XSS attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dokuwiki/Dokuwiki3 versions
cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09:*:*:*:*:*:*:*
- cpe:2.3:a:andreas_gohr:dokuwiki:release_2006-03-09e:*:*:*:*:*:*:*
- (no CPE)range: <= 2006-03-09e

Patches

Vulnerability mechanics

References

secunia.com/advisories/23926nvdVendor Advisory
secunia.com/advisories/24853nvdVendor Advisory
osvdb.org/31620nvd
security.gentoo.org/glsa/glsa-200704-08.xmlnvd
sla.ckers.org/forum/read.phpnvd
www.securityfocus.com/bid/22236nvd
www.vupen.com/english/advisories/2007/0357nvd
exchange.xforce.ibmcloud.com/vulnerabilities/31930nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000