Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2007-0894

Disclosure Date: February 12, 2007 (last updated October 04, 2023)
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.
0
0
Attacker Value
Unknown

CVE-2006-1498

Disclosure Date: March 30, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links.
0
0
Attacker Value
Unknown

CVE-2006-0322

Disclosure Date: January 19, 2006 (last updated February 22, 2025)
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service (infinite loop) via "certain malformed links."
0
0
Attacker Value
Unknown

CVE-2005-4501

Disclosure Date: December 22, 2005 (last updated February 22, 2025)
MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.
0
0