PT-2025-17464 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki versions before commit f504ed8 Description: The issue is related to SQL injection when renaming a namespace in Special:ManageWiki/namespaces, specifically when using a page prefix with an injection payload. This occurs in ManageWik...

CVE-2025-32956: Improper Neutralization of Special Elements used in an SQL Command

ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix namespace name, which is the current namespace you are renaming with an injection...