Hardened-PHP Project Security Advisory – DokuWiki comes with an AJAX spellchecking service that can be called by every visiting client without the need of authorization. Unfortunately, the spellchecking service used the /e modifier of preg_replace() to handle links that are embedded in the text to translate in an unsafe way, allowing for arbitrary code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47221/advisory_042006.119.txt
Source: https://packetstormsecurity.com/files/47221/Hardened-PHP-Project-Security-Advisory-2006-04.119.html