7633 matches found
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
Cross site scripting
Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5687
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/...
CVE-2008-5688
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...
CVE-2008-5688
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...
CVE-2008-5249
CVE-2008-5249 is a cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0–1.13.2 that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Connected advisories confirm affected products and later fixes: Debian’s DSA-1901-1 for mediawiki1.7 cites CVE-2008-5249 amo...
CVE-2008-5252
Cross-site request forgery CSRF vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors...
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
CVE-2008-5687
CVE-2008-5687 affects MediaWiki 1.11 through 1.13.3, where backups of deleted images were not properly protected, potentially allowing remote attackers to obtain sensitive information by requesting files under images/deleted/. The connected documents confirm this issue across multiple advisories ...
CVE-2008-5249
Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
CVE-2008-5250
The CVE-2008-5250 issue affects MediaWiki prior to 1.6.11, 1.12.x prior to 1.12.2, and 1.13.x prior to 1.13.3. It is a cross-site scripting (XSS) vulnerability that can be exploited by remote authenticated users who edit a wiki page when using Internet Explorer with uploads enabled, or with an SV...
CVE-2008-5687
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/...
CVE-2008-5249
Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5688
CVE-2008-5688 affects MediaWiki 1.8.1 through 1.13.3 (and variants) where, if wgShowExceptionDetails is enabled, an uncaught exception can reveal the full installation path in a debugging message. This may allow remote attackers to obtain sensitive information via unspecified requests triggering ...
CVE-2008-5252
Cross-site request forgery CSRF vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors...
CVE-2008-5252
CVE-2008-5252 describes a cross-site request forgery (CSRF) vulnerability in MediaWiki's Special:Import feature. Affected versions per the initial document: MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3. The issue allows remote attackers to perform unspecified act...
CVE-2008-5688
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...
CVE-2008-5687
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/...
mediawiki -- multiple vulnerabilities
The MediaWiki development team reports: Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Certain unspecified input related to uploads i...