Lucene search
K

21 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-62658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension...

7.5CVSS5.6AI score0.00027EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/21 8:29 p.m.6 views

CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS7.7AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/20 9:30 p.m.2 views

EUVD-2025-35103

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS7.2AI score0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/10/20 9:15 p.m.3 views

CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/10/20 9:15 p.m.0 views

UBUNTU-CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS5.9AI score0.00027EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/20 8:23 p.m.3 views

CVE-2025-62658 SQL injection in WatchAnalytics through Special:ClearPendingReviews

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS7.3AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/20 8:23 p.m.9 views

CVE-2025-62658 SQL injection in WatchAnalytics through Special:ClearPendingReviews

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

7.5CVSS0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/10/20 8:23 p.m.8 views

CVE-2025-62658

CVE-2025-62658 affects the MediaWiki WatchAnalytics extension (versions 1.43 and 1.44). The vulnerability is an SQL Injection caused by improper neutralization of user-controlled input in the extension, with network attack vector, high impact on confidentiality, integrity, and availability. The C...

7.5CVSS7.3AI score0.00027EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/20 12:0 a.m.1 views

MediaWiki - WatchAnalytics extension 安全漏洞

MediaWiki - WatchAnalytics extension is an open source user tracking and analytics extension for MediaWiki. A security vulnerability exists in MediaWiki - WatchAnalytics extension versions 1.43 and 1.44, which stems from improper neutralization of special elements and could lead to an SQL injecti...

7.5CVSS7.5AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-20696

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00386EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 9:42 a.m.4 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS6AI score0.00386EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:0 a.m.0 views

The vulnerability of the WatchAnalytics extension of the software platform, which enables the implementation of a hypertext environment like MediaWiki, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the WatchAnalytics extension for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using the...

6.4CVSS0.00386EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2024/03/06 10:56 a.m.14 views

BIT-MEDIAWIKI-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS5.9AI score0.00386EPSS
Exploits1References3
CNVD
CNVD
added 2024/03/01 12:0 a.m.3 views

MediaWiki cross-site scripting vulnerability (CNVD-2024-12712)

MediaWiki is an open source Wiki system based on PHP+MySQL environment. MediaWiki cross-site scripting attack vulnerability , the reason for this vulnerability is because the WatchAnalytics extension has a vulnerability , an attacker can use this vulnerability through the Special:PageStatistics...

6.1CVSS6.5AI score0.00386EPSS
Exploits1References1
OSV
OSV
added 2024/01/12 6:15 a.m.11 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1CVSS6AI score
Exploits0References2
Prion
Prion
added 2024/01/12 6:15 a.m.14 views

Design/Logic Flaw

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

5.8CVSS6.2AI score0.00386EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/01/12 12:0 a.m.14 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6.1AI score0.00386EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/12 12:0 a.m.4 views

CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...

6AI score0.00386EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.1 views

MediaWiki 安全漏洞

MediaWiki is an open source Wiki system based on PHP+MySQL environment. MediaWiki cross-site scripting attack vulnerability , the reason for this vulnerability is because the WatchAnalytics extension has a vulnerability , an attacker can use this vulnerability through the Special:PageStatistics...

6.1CVSS6.7AI score0.00386EPSS
Exploits1References3
CVE
CVE
added 2024/01/12 12:0 a.m.54 views

CVE-2024-23177

CVE-2024-23177 affects the WatchAnalytics extension in MediaWiki prior to 1.40.2 . The issue allows XSS via the Special:PageStatistics page parameter due to improper input handling in the extension. Impact is cross-site scripting (arbitrary JavaScript execution) in affected contexts. The CVSS bas...

6.1CVSS5.9AI score0.00386EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder