Lucene search
+L

25 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/27 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-62658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension...

7.5CVSS5.8AI score0.00238EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/21 8:29 p.m.•30 views

CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/20 9:30 p.m.•21 views

EUVD-2025-35103

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/20 9:15 p.m.•35 views

CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS0.00238EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/20 9:15 p.m.•62 views

UBUNTU-CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/20 8:23 p.m.•9 views

CVE-2025-62658 SQL injection in WatchAnalytics through Special:ClearPendingReviews

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/20 8:23 p.m.•31 views

CVE-2025-62658

CVE-2025-62658 affects the MediaWiki WatchAnalytics extension (versions 1.43 and 1.44). The vulnerability is an SQL Injection caused by improper neutralization of user-controlled input in the extension, with network attack vector, high impact on confidentiality, integrity, and availability. The C...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/20 8:23 p.m.•48 views

CVE-2025-62658 SQL injection in WatchAnalytics through Special:ClearPendingReviews

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/20 12:00 a.m.•5 views

PT-2025-42818

Name of the Vulnerable Software and Affected Versions MediaWiki WatchAnalytics extension versions 1.43 through 1.44 Description A flaw exists in the MediaWiki WatchAnalytics extension that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL command...

7.5CVSS5.7AI score0.00238EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/10/20 12:00 a.m.•17 views

MediaWiki - WatchAnalytics extension 安全漏洞

MediaWiki - WatchAnalytics extension is an open source user tracking and analytics extension for MediaWiki. A security vulnerability exists in MediaWiki - WatchAnalytics extension versions 1.43 and 1.44, which stems from improper neutralization of special elements and could lead to an SQL injecti...

7.5CVSS5.8AI score0.00238EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/20 12:00 a.m.•5 views

CVE-2025-62658: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-20696

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00424EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/23 9:42 a.m.•19 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS6AI score0.00424EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/04/10 12:00 a.m.•19 views

The vulnerability of the WatchAnalytics extension of the software platform, which enables the implementation of a hypertext environment like MediaWiki, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the WatchAnalytics extension for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using the...

6.4CVSS6AI score0.00424EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2024/03/06 10:56 a.m.•22 views

BIT-MEDIAWIKI-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS5.9AI score0.00424EPSS
SaveExploits1References3
CNVD
CNVD
•added 2024/03/01 12:00 a.m.•20 views

MediaWiki cross-site scripting vulnerability (CNVD-2024-12712)

MediaWiki is an open source Wiki system based on PHP+MySQL environment. MediaWiki cross-site scripting attack vulnerability , the reason for this vulnerability is because the WatchAnalytics extension has a vulnerability , an attacker can use this vulnerability through the Special:PageStatistics...

6.1CVSS6.5AI score0.00424EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/12 6:15 a.m.•31 views

Design/Logic Flaw

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

5.8CVSS6.2AI score0.00424EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/01/12 12:00 a.m.•22 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•18 views

PT-2024-2679

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.40.2 WatchAnalytics extension in MediaWiki affected versions not specified Description An issue in the WatchAnalytics extension allows for XSS to occur via the Special:PageStatistics page parameter. This can enabl...

6.4CVSS6AI score0.00424EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2024/01/12 12:00 a.m.•9 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6AI score0.00424EPSS
SaveExploits1References2
Rows per page
Query Builder