Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mediawiki mediawiki 1.27.1 vulnerabilities and exploits

(subscribe to this query)
790
VMScore
CVE-2017-0372
Parameters injection in the SyntaxHighlight extension of Mediawiki prior to 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Mediawiki Mediawiki 1.27.1Mediawiki Mediawiki 1.28.0Mediawiki MediawikiMediawiki Mediawiki 1.27.2Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.28.1Debian Debian Linux 9.0Debian Debian Linux 7.0
445
VMScore
CVE-2016-6331
ApiParse in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to bypass intended per-title read restrictions via a parse action to api.php.
Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.27.0
445
VMScore
CVE-2016-6332
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1, when $wgBlockDisablesLogin is true, might allow remote malicious users to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.
Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0
445
VMScore
CVE-2016-6335
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 does not generate head items in the context of a given title, which allows remote malicious users to obtain sensitive information via a parse action to api.php.
Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.2
356
VMScore
CVE-2016-6336
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by us...
Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.3
383
VMScore
CVE-2016-6333
Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.
Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0
383
VMScore
CVE-2016-6334
Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to inject arbitrary web script or HTML via vectors involving replacement of percent...
Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.27.0
445
VMScore
CVE-2016-6337
MediaWiki 1.27.x prior to 1.27.1 might allow remote malicious users to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.
Mediawiki Mediawiki 1.27.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injectionCVE-2024-35894SQLCVE-2024-5105CVE-2014-100005CVE-2024-35895unauthorizedCVE-2024-22120CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook