Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mediawiki mediawiki 1.17.1 vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2012-1578
Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x prior to 1.17.3 and 1.18.x prior to 1.18.2 allow remote malicious users to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block mod...
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.17
Mediawiki Mediawiki 1.17.2
Mediawiki Mediawiki 1.17.0
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
4.3
CVSSv2
CVE-2012-1582
Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x prior to 1.17.3 and 1.18.x prior to 1.18.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using...
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.17
Mediawiki Mediawiki 1.17.2
Mediawiki Mediawiki 1.17.0
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
4.3
CVSSv2
CVE-2012-2698
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki prior to 1.17.5, 1.18.x prior to 1.18.4, and 1.19.x prior to 1.19.1 allows remote malicious users to inject arbitrary web script or HTML via the uselang parameter to inde...
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.2
Mediawiki Mediawiki 1.18.3
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.16.0
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.5.3
1 EDB exploit
5
CVSSv2
CVE-2011-4360
MediaWiki prior to 1.17.1 allows remote malicious users to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.
Mediawiki Mediawiki
Debian Debian Linux 5.0
Debian Debian Linux 6.0
5
CVSSv2
CVE-2011-4361
MediaWiki prior to 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote malicious users to obtain sensitive information by (1) leveraging the SpecialUpload::ajaxGetExistsWarning function, or by (2) leveraging an extension, as demonst...
Mediawiki Mediawiki
Debian Debian Linux 5.0
Debian Debian Linux 6.0
4.3
CVSSv2
CVE-2011-1587
Cross-site scripting (XSS) vulnerability in MediaWiki prior to 1.16.4, when Internet Explorer 6 or earlier is used, allows remote malicious users to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? (ques...
Mediawiki Mediawiki
Mediawiki Mediawiki 1.1.0
Mediawiki Mediawiki 1.2.0
Mediawiki Mediawiki 1.2.1
Mediawiki Mediawiki 1.2.2
Mediawiki Mediawiki 1.2.3
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.2.5
Mediawiki Mediawiki 1.2.6
Mediawiki Mediawiki 1.3
Mediawiki Mediawiki 1.3.0
Mediawiki Mediawiki 1.3.1
Mediawiki Mediawiki 1.3.2
Mediawiki Mediawiki 1.3.3
Mediawiki Mediawiki 1.3.4
Mediawiki Mediawiki 1.3.5
Mediawiki Mediawiki 1.3.6
Mediawiki Mediawiki 1.3.7
Mediawiki Mediawiki 1.3.8
Mediawiki Mediawiki 1.3.9
Mediawiki Mediawiki 1.3.10
Mediawiki Mediawiki 1.3.11
4.3
CVSSv2
CVE-2011-1578
Cross-site scripting (XSS) vulnerability in MediaWiki prior to 1.16.3, when Internet Explorer 6 or earlier is used, allows remote malicious users to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query ...
Mediawiki Mediawiki
Mediawiki Mediawiki 1.1.0
Mediawiki Mediawiki 1.2.0
Mediawiki Mediawiki 1.2.1
Mediawiki Mediawiki 1.2.2
Mediawiki Mediawiki 1.2.3
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.2.5
Mediawiki Mediawiki 1.2.6
Mediawiki Mediawiki 1.3
Mediawiki Mediawiki 1.3.0
Mediawiki Mediawiki 1.3.1
Mediawiki Mediawiki 1.3.2
Mediawiki Mediawiki 1.3.3
Mediawiki Mediawiki 1.3.4
Mediawiki Mediawiki 1.3.5
Mediawiki Mediawiki 1.3.6
Mediawiki Mediawiki 1.3.7
Mediawiki Mediawiki 1.3.8
Mediawiki Mediawiki 1.3.9
Mediawiki Mediawiki 1.3.10
Mediawiki Mediawiki 1.3.11
5.8
CVSSv2
CVE-2011-1579
The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki prior to 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote malicious users to conduct cross-site scripting (XSS) attacks or obtain sensitive infor...
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.16.0
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.5.3
Mediawiki Mediawiki 1.13.0
Mediawiki Mediawiki 1.14.0
Mediawiki Mediawiki 1.9.3
Mediawiki Mediawiki 1.11.0
Mediawiki Mediawiki 1.6.12
Mediawiki Mediawiki 1.5
3.5
CVSSv2
CVE-2011-1580
The transwiki import functionality in MediaWiki prior to 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.16.0
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.5.3
Mediawiki Mediawiki 1.13.0
Mediawiki Mediawiki 1.14.0
Mediawiki Mediawiki 1.9.3
Mediawiki Mediawiki 1.11.0
Mediawiki Mediawiki 1.6.12
Mediawiki Mediawiki 1.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2