Vulnerability index

Browse CVEs

249 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mediawiki MEDIUM 5.1
CVE-2007-0177

Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, w…

Patch available
Fix from $1,600 2007-01-11
Mediawiki MEDIUM 5.0
CVE-2006-0322

Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause…

Patch available
Fix from $1,600 2006-01-19
Mediawiki HIGH 7.5
CVE-2005-4031

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," wh…

Patch available
Fix from $1,950 2005-12-06
Mediawiki MEDIUM 5.0
CVE-2005-3166

Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a …

Patch available
Fix from $1,600 2005-10-06
Mediawiki MEDIUM 5.0
CVE-2005-0536

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or d…

Patch available
Fix from $1,600 2005-05-02
Mediawiki HIGH 7.5
CVE-2004-1405EPSS 5%

MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows …

Patch available
Fix from $1,950 2004-12-31
Mediawiki HIGH 7.5
CVE-2004-2186

SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance.

Patch available
Fix from $1,950 2004-12-31
Mediawiki MEDIUM 6.8
CVE-2004-2185

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1)…

Patch available
Fix from $1,600 2004-12-31
Mediawiki MEDIUM 5.0
CVE-2004-2187

Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors.

Patch available
Fix from $1,600 2004-12-31