Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mediawiki
Mediawik

Mediawiki Mediawik vulnerabilities

Known exploitedIn KEVPublic exploitFix available

mediawikiCross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi...CVE-2013-43054.3 MediumOctober 11, 2013
mediawikiincludes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4303Fix available6.1 MediumSeptember 13, 2013
mediawikiincludes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4301Fix available5.0 MediumSeptember 13, 2013
mediawiki(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5)...CVE-2013-4302Fix available5.0 MediumSeptember 13, 2013
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the...CVE-2013-43074.3 MediumSeptember 11, 2013
mediawikiUnrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6...CVE-2013-2114Fix available6.8 MediumJuly 21, 2013
mediawikiThe wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote...CVE-2012-4885Fix available5.0 MediumSeptember 9, 2012
mediawikiCross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3...CVE-2012-1582Fix available4.3 MediumSeptember 9, 2012
mediawikiMediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password...CVE-2012-1581Fix available5.0 MediumSeptember 9, 2012
mediawikiCross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17...CVE-2012-15806.8 MediumSeptember 9, 2012
mediawikiThe resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private...CVE-2012-15795.0 MediumSeptember 9, 2012
mediawikiMultiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and...CVE-2012-15786.8 MediumSeptember 9, 2012
mediawikiCross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php...CVE-2012-2698Public exploitFix available4.3 MediumJune 29, 2012
mediawiki, debian linux +1 moreMediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests,...CVE-2011-4361Fix available5.0 MediumDecember 18, 2011
mediawiki, debian linux +1 moreMediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages...CVE-2011-4360Fix available5.0 MediumDecember 18, 2011
mediawikiincludes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not...CVE-2011-17665.8 MediumMay 23, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or...CVE-2011-17654.3 MediumMay 23, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or...CVE-2011-1587Fix available4.3 MediumApril 27, 2011
mediawikiThe transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,...CVE-2011-1580Fix available3.5 LowApril 27, 2011
mediawikiThe checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3...CVE-2011-1579Fix available5.8 MediumApril 27, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or...CVE-2011-1578Fix available4.3 MediumApril 27, 2011
mediawikiPHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when...CVE-2010-27896.8 MediumApril 27, 2011
mediawikiCross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when...CVE-2010-2788Fix available2.6 LowApril 27, 2011
mediawikiapi.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private...CVE-2010-2787Fix available4.3 MediumApril 27, 2011
mediawikiMultiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes...CVE-2011-05377.5 HighFebruary 4, 2011
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to...CVE-2011-0047Fix available4.3 MediumFebruary 4, 2011
mediawikiMediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers...CVE-2011-0003Fix available5.8 MediumJanuary 7, 2011
mediawikiCross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1...CVE-2010-1648Fix available6.8 MediumJune 7, 2010
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16...CVE-2010-1647Fix available4.3 MediumJune 7, 2010
mediawikiMediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly...CVE-2010-1150Fix available6.0 MediumApril 20, 2010
mediawikithumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as...CVE-2010-1190Fix available4.3 MediumMarch 23, 2010
mediawikiMediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites...CVE-2010-1189Fix available5.0 MediumMarch 23, 2010
mediawiki mediawik, mediawiki +1 moreCross-site scripting (XSS) vulnerability in the Special:Block implementation in the...CVE-2009-4589Fix available4.3 MediumJanuary 7, 2010
mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php)...CVE-2009-0737Fix available2.6 LowFebruary 25, 2009
mediawikiMediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is...CVE-2008-5688Fix available4.3 MediumDecember 19, 2008
mediawikiMediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download...CVE-2008-5687Fix available5.0 MediumDecember 19, 2008
mediawikiCross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0...CVE-2008-5252Fix available5.8 MediumDecember 19, 2008
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1...CVE-2008-5250Fix available3.5 LowDecember 19, 2008
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote...CVE-2008-5249Fix available4.3 MediumDecember 19, 2008
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions...CVE-2008-4408Fix available4.3 MediumOctober 3, 2008
mediawikiUnspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain...CVE-2008-1318Fix available5.0 MediumMarch 13, 2008
mediawiki, mediawiki botquery ext, microsoft internet explorer +2 moreCross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10...CVE-2008-0460Fix availableEPSS 14.6%4.3 MediumJanuary 25, 2008
mediawikiCross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier...CVE-2007-48834.3 MediumSeptember 14, 2007
mediawikiCross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0...CVE-2007-4828Fix available4.3 MediumSeptember 12, 2007
mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x...CVE-2007-1055Fix available6.8 MediumFebruary 21, 2007
mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x...CVE-2007-1054Fix available6.8 MediumFebruary 21, 2007
mediawikiMediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct...CVE-2007-0894Fix available5.0 MediumFebruary 12, 2007
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers...CVE-2007-07884.3 MediumFebruary 6, 2007
mediawikiCross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before...CVE-2007-0177Public exploitFix available5.1 MediumJanuary 11, 2007
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows...CVE-2006-28952.6 LowJune 7, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open