3 matches found
SUSE CVE-2008-5252
Cross-site request forgery CSRF vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors...
5.8CVSS7AI score0.00738EPSS
SaveExploits0References5
CVE-2021-45474
In MediaWiki through 1.37, the Special:ImportFile URI aka FileImporter allows XSS, as demonstrated by the clientUrl parameter...
6.1CVSS6.2AI score0.00974EPSS
SaveExploits0References4
DEBIAN-CVE-2008-5252
Cross-site request forgery CSRF vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors...
5.8CVSS6.5AI score0.00738EPSS
SaveExploits0References1
20