Mediawiki : Security Vulnerabilities, CVEs, Published In February 2007
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177.
Max CVSS
6.8
EPSS Score
1.67%
Published
2007-02-21
Updated
2018-10-19
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer.
Max CVSS
6.8
EPSS Score
10.55%
Published
2007-02-21
Updated
2018-10-16
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.
Max CVSS
5.0
EPSS Score
0.96%
Published
2007-02-12
Updated
2018-10-16
Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "sortable tables JavaScript."
Max CVSS
4.3
EPSS Score
2.28%
Published
2007-02-06
Updated
2017-07-29
4 vulnerabilities found