Browse CVEs

MEDIUM 5.1 CVE-2007-0177 Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, w… Mediawiki Patch available Fix from $1,6002007-01-11 MEDIUM 5.0 CVE-2006-0322 Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause… Mediawiki Patch available Fix from $1,6002006-01-19 HIGH 7.5 CVE-2005-4031 Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," wh… Mediawiki Patch available Fix from $1,9502005-12-06 MEDIUM 5.0 CVE-2005-3166 Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a … Mediawiki Patch available Fix from $1,6002005-10-06 MEDIUM 5.0 CVE-2005-0536 Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or d… Mediawiki Patch available Fix from $1,6002005-05-02 HIGH 7.5 CVE-2004-1405EPSS 5% MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows … Mediawiki Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2186 SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance. Mediawiki Patch available Fix from $1,9502004-12-31 MEDIUM 6.8 CVE-2004-2185 Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1)… Mediawiki Patch available Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2187 Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors. Mediawiki Patch available Fix from $1,6002004-12-31