ME
Product
Mediawiki
417
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 63Medium 198Low 3
Watch
Add Mediawiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-4501 | – | Dec 22 | MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute… Affected: through 1.5.3; 1.1.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; +34 more |
| CVE-2005-4031 | – | Dec 6 | Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a… Affected: 1.5.0; 1.5.1; 1.5.2; 1.5_alpha1; 1.5_alpha2; 1.5_beta1; +2 more |
| CVE-2005-3167 | – | Oct 6 | Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by… Affected: 1.4.1; 1.4.2; 1.4.3; 1.4.5; 1.4.6; 1.4.7; +9 more |
| CVE-2005-3166 | – | Oct 6 | Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption… Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +24 more |
| CVE-2005-3165 | – | Oct 6 | Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or… Affected: 1.4.1; 1.4.2; 1.4.3; 1.4.5; 1.4.6; 1.4.7; +7 more |
| CVE-2005-2396 | – | Jul 27 | Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template Affected: 1.1.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +25 more |
| CVE-2005-2215 | – | Jul 12 | Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 1.4.1; 1.4.2; 1.4.3; 1.4.5; 1.4_beta6; 1.5_alpha1; +3 more |
| CVE-2005-1888 | – | Jun 6 | Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +14 more |
| CVE-2005-1245 | – | May 2 | Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arbitrary web script or HTML via unknown… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +11 more |
| CVE-2005-0536 | – | May 2 | Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a… Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +11 more |
| CVE-2005-0534 | – | May 2 | Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +11 more |
| CVE-2005-0535 | – | Feb 22 | Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +5 more |
| CVE-2004-2187 | – | Dec 31 | Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors Affected: 1.3.5 |
| CVE-2004-2186 | – | Dec 31 | SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance Affected: 1.3.5 |
| CVE-2004-2185 | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter… Affected: 1.3.5 |
| CVE-2004-2152 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML Affected: 1.1.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +7 more |
| CVE-2004-1405 | – | Dec 31 | MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and… Affected: 1.3; 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; +6 more |