Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mediawiki mediawiki 1.26.3 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-6335
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 does not generate head items in the context of a given title, which allows remote malicious users to obtain sensitive information via a parse action to api.php.
Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.2
4
CVSSv2
CVE-2016-6336
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by us...
Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.3
5
CVSSv2
CVE-2016-6331
ApiParse in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to bypass intended per-title read restrictions via a parse action to api.php.
Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.27.0
5
CVSSv2
CVE-2016-6332
MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1, when $wgBlockDisablesLogin is true, might allow remote malicious users to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.
Mediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0
4.3
CVSSv2
CVE-2016-6333
Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.
Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.27.0Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.0
4.3
CVSSv2
CVE-2016-6334
Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki prior to 1.23.15, 1.26.x prior to 1.26.4, and 1.27.x prior to 1.27.1 allows remote malicious users to inject arbitrary web script or HTML via vectors involving replacement of percent...
Mediawiki Mediawiki 1.26.3Mediawiki Mediawiki 1.26.4Mediawiki MediawikiMediawiki Mediawiki 1.26.0Mediawiki Mediawiki 1.26.1Mediawiki Mediawiki 1.26.2Mediawiki Mediawiki 1.27.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
bypassopen redirectCVE-2024-4358CVE-2024-24199CVE-2024-5550CVE-2024-5305CVE-2024-30373CVE-2024-1800deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook