Skip to content

Mediawiki Mediawik vulnerabilities

mediawikiCross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in...CVE-2006-26114.3 MediumMay 26, 2006
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote...CVE-2006-1498Fix available4.3 MediumMarch 30, 2006
mediawikiUnspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5...CVE-2006-0322Fix available5.0 MediumJanuary 19, 2006
mediawikiMediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote...CVE-2005-4501Fix available4.3 MediumDecember 22, 2005
mediawikiEval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute...CVE-2005-40317.5 HighDecember 6, 2005
mediawikiIncomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain...CVE-2005-3167Fix available4.3 MediumOctober 6, 2005
mediawikiUnspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3...CVE-2005-3166Fix available5.0 MediumOctober 6, 2005
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote...CVE-2005-3165Fix available4.3 MediumOctober 6, 2005
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers...CVE-2005-2396Fix available4.3 MediumJuly 27, 2005
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1...CVE-2005-2215Fix available4.3 MediumJuly 12, 2005
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to...CVE-2005-1888Fix available4.3 MediumJune 6, 2005
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy (...CVE-2005-1245Fix available4.3 MediumApril 24, 2005
mediawikiDirectory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1...CVE-2005-0536Fix available5.0 MediumFebruary 24, 2005
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta...CVE-2005-0534Fix available4.3 MediumFebruary 24, 2005
mediawiki, gentoo linux +1 moreCross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta...CVE-2005-0535Fix available7.5 HighFebruary 22, 2005
mediawikiUnknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has...CVE-2004-2187Fix available5.0 MediumDecember 31, 2004
mediawikiSQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL...CVE-2004-2186Fix available7.5 HighDecember 31, 2004
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to...CVE-2004-2185Fix available6.8 MediumDecember 31, 2004
mediawikiCross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and...CVE-2004-2152Fix available4.3 MediumDecember 31, 2004
mediawikiMediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with...CVE-2004-1405Public exploitFix available7.5 HighDecember 31, 2004