7 matches found
CVE-2026-102796
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...
CVE-2026-102796 Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parameters
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...
EUVD-2026-89094
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...
CVE-2026-102796
The MediaWiki - UserPageViewTracker Extension is vulnerable to an SQL Injection flaw caused by improper neutralization of special elements in SQL commands. An unauthenticated remote attacker can exploit this by submitting crafted input through the filterusers or ignoreusers parameters. This vulne...
CVE-2026-102796 Unauthenticated SQL injection in UserPageViewTracker via filterusers and ignoreusers parameters
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...
PT-2026-102712
Name of the Vulnerable Software and Affected Versions Mediawiki - UserPageViewTracker Extension versions prior to 1.46.1 Mediawiki - UserPageViewTracker Extension version 1.45.5 Mediawiki - UserPageViewTracker Extension version 1.43.10 Description An unauthenticated SQL Injection occurs due to...
CVE-2026-102796: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: from before 1.46.1, 1.45.5, 1.43.10...