Skip to contentMediawiki vulnerabilities
Newest
- mediawikiMultiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and...CVE-2012-15786.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php...CVE-2012-2698Public exploitFix available4.3 Medium
- mediawiki, debian linux +1 moreMediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests,...CVE-2011-4361Fix available5.0 Medium
- mediawiki, debian linux +1 moreMediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages...CVE-2011-4360Fix available5.0 Medium
- mediawikiincludes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not...CVE-2011-17665.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or...CVE-2011-17654.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or...CVE-2011-1587Fix available4.3 Medium
- mediawikiThe transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges,...CVE-2011-1580Fix available3.5 Low
- mediawikiThe checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3...CVE-2011-1579Fix available5.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or...CVE-2011-1578Fix available4.3 Medium
- mediawikiPHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when...CVE-2010-27896.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when...CVE-2010-2788Fix available2.6 Low
- mediawikiapi.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private...CVE-2010-2787Fix available4.3 Medium
- mediawikiMultiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes...CVE-2011-05377.5 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.16.2 allows remote attackers to...CVE-2011-0047Fix available4.3 Medium
- mediawikiMediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers...CVE-2011-0003Fix available5.8 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1...CVE-2010-1648Fix available6.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16...CVE-2010-1647Fix available4.3 Medium
- mediawikiMediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly...CVE-2010-1150Fix available6.0 Medium
- mediawikithumb.php in MediaWiki before 1.15.2, when used with access-restriction mechanisms such as...CVE-2010-1190Fix available4.3 Medium
- mediawikiMediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites...CVE-2010-1189Fix available5.0 Medium
- mediawiki mediawik, mediawiki +1 moreCross-site scripting (XSS) vulnerability in the Special:Block implementation in the...CVE-2009-4589Fix available4.3 Medium
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php)...CVE-2009-0737Fix available2.6 Low
- mediawikiMediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is...CVE-2008-5688Fix available4.3 Medium
- mediawikiMediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download...CVE-2008-5687Fix available5.0 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0...CVE-2008-5252Fix available5.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1...CVE-2008-5250Fix available3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote...CVE-2008-5249Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions...CVE-2008-4408Fix available4.3 Medium
- mediawikiUnspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain...CVE-2008-1318Fix available5.0 Medium
- mediawiki, mediawiki botquery ext, microsoft internet explorer +2 moreCross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10...CVE-2008-0460Fix availableEPSS 14.6%4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier...CVE-2007-48834.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0...CVE-2007-4828Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x...CVE-2007-1055Fix available6.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x...CVE-2007-1054Fix available6.8 Medium
- mediawikiMediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct...CVE-2007-0894Fix available5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers...CVE-2007-07884.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before...CVE-2007-0177Public exploitFix available5.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows...CVE-2006-28952.6 Low
- mediawikiCross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in...CVE-2006-26114.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote...CVE-2006-1498Fix available4.3 Medium
- mediawikiUnspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5...CVE-2006-0322Fix available5.0 Medium
- mediawikiMediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote...CVE-2005-4501Fix available4.3 Medium
- mediawikiEval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute...CVE-2005-40317.5 High
- mediawikiIncomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain...CVE-2005-3167Fix available4.3 Medium
- mediawikiUnspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3...CVE-2005-3166Fix available5.0 Medium
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote...CVE-2005-3165Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers...CVE-2005-2396Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1...CVE-2005-2215Fix available4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to...CVE-2005-1888Fix available4.3 Medium
- Show moreLoading…