Code injection

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

UBUNTU-CVE-2018-13258

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258 Tarball was missing .htaccess files

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

CVE-2018-13258

CVE-2018-13258 affects MediaWiki 1.31 prior to 1.31.1. The issue is that the tarball provided for distribution omits .htaccess files, which are intended to protect certain directories from public web access. As a result, directories that should not be web-accessible may be exposed. The vulnerabil...

PT-2018-11722

Name of the Vulnerable Software and Affected Versions MediaWiki version 1.31 Description The issue arises from missing .htaccess files in the provided tarball for MediaWiki, which are used to protect certain directories from being web accessible. Recommendations For MediaWiki version 1.31, update...

CVE-2018-13258: Exposure of Sensitive Information to an Unauthorized Actor

Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...

Important: mod_perl, mod24_perl

Issue Overview: modperl allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

Important: Red Hat Security Advisory: rh-perl526-mod_perl security update

An update for rh-perl526-modperl is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

Scientific Linux Security Update : mod_perl on SL6.x i386/x86_64 (20180924)

Security Fixes : - modperl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess CVE-2011-2767 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid117682; scriptversion"1.5";...

mod_perl: arbitrary Perl code execution in the context of the user account via a user-owned .htaccess

modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting...

mod_perl security update

2.0.4-12 - Fix CVE-2011-2767 arbitrary Perl code execution in the context of the user account via a user-owned .htaccess bug 1626272...

PT-2018-13990

Name of the Vulnerable Software and Affected Versions BigTree version 4.2.23 Description The issue allows remote attackers to bypass authentication when Advanced or Simple Rewrite routing is enabled. This can be achieved by using a .. substring in a URI, such as launch.php?bigtree htaccess...

1.31.0 tarball is missing .htaccess files

More info at https://phabricator.wikimedia.org/T199029...

CVE-2018-16974

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess file, and then using a filename that ends in .php followed by space characters for bypassing the...