EUVD-2015-7903

Malware in sbrugna...

EUVD-2015-7902

Malware in sbrugna...

CVE-2015-8007

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...

CVE-2015-8006

Cross-site scripting XSS vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remote attackers to inject arbitrary web script or HTML via the page title...

Design/Logic Flaw

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...

Cross site scripting

Cross-site scripting XSS vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remote attackers to inject arbitrary web script or HTML via the page title...

CVE-2015-8006

Cross-site scripting XSS vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remote attackers to inject arbitrary web script or HTML via the page title...

CVE-2015-8007

Affected software/component: MediaWiki Echo extension. Vulnerability: improper implementation of the hideuser functionality, enabling remote authenticated users to see hidden usernames in certain notifications. Impact (as described): exposure of hidden usernames in “non-revision based” notificati...

CVE-2015-8007

The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification...