Vulners
Lucene search
2 matches found
DEBIAN-CVE-2015-2934
MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xmlparse function does not expand entities, which allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...
4.3CVSS6.4AI score0.02094EPSS
SaveExploits0References1
UBUNTU-CVE-2015-2934
MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xmlparse function does not expand entities, which allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...
4.3CVSS5.9AI score0.02094EPSS
SaveExploits0References4
20