CVE-2017-8808

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping...

CVE-2017-8808

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping...

CVE-2017-8808: Improper Neutralization of Input During Web Page Generation

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping...

PT-2017-18543

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.27.4 MediaWiki versions 1.28.x prior to 1.28.3 MediaWiki versions 1.29.x prior to 1.29.2 Description The issue occurs when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL...

CVE-2008-5688: Exposure of Sensitive Information to an Unauthorized Actor

MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught...