Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mediawiki mediawiki 1.18.2 vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2012-1580
Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x prior to 1.17.3 and 1.18.x prior to 1.18.2 allows remote malicious users to hijack the authentication of unspecified victims for requests that upload files.
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.17
Mediawiki Mediawiki 1.17.2
Mediawiki Mediawiki 1.17.0
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
383
VMScore
CVE-2012-1582
Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x prior to 1.17.3 and 1.18.x prior to 1.18.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using...
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.17
Mediawiki Mediawiki 1.17.2
Mediawiki Mediawiki 1.17.0
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
605
VMScore
CVE-2012-1578
Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x prior to 1.17.3 and 1.18.x prior to 1.18.2 allow remote malicious users to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block mod...
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.17
Mediawiki Mediawiki 1.17.2
Mediawiki Mediawiki 1.17.0
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
435
VMScore
CVE-2012-2698
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki prior to 1.17.5, 1.18.x prior to 1.18.4, and 1.19.x prior to 1.19.1 allows remote malicious users to inject arbitrary web script or HTML via the uselang parameter to inde...
Mediawiki Mediawiki 1.18
Mediawiki Mediawiki 1.18.2
Mediawiki Mediawiki 1.18.3
Mediawiki Mediawiki 1.18.0
Mediawiki Mediawiki 1.18.1
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.16.0
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.5.3
1 EDB exploit
383
VMScore
CVE-2014-2853
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki prior to 1.21.9 and 1.22.x prior to 1.22.6 allows remote malicious users to inject arbitrary web script or HTML via the sort key in an info action.
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.16.0
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.19
Mediawiki Mediawiki 1.19.8
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.17.1
Mediawiki Mediawiki 1.5.3
Mediawiki Mediawiki 1.13.0
Mediawiki Mediawiki 1.20.5
Mediawiki Mediawiki 1.14.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
server-side request forgery
CVE-2024-30067
CVE-2024-5553
CVE-2024-30095
IDOR
CVE-2024-35252
CVE-2024-23692
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2