Mediawiki

Mediawiki

395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2013-4569

  • EPSS 0.46%
  • Veröffentlicht 13.12.2013 18:07:54
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information (revision-deleted...

6.8

CVE-2012-5394

  • EPSS 0.17%
  • Veröffentlicht 13.12.2013 18:07:53
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors...

4.3

CVE-2013-4573

  • EPSS 0.36%
  • Veröffentlicht 25.11.2013 19:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to inject arbitrary web script or HTML via the "to" parameter t...

4.3

CVE-2013-2031

  • EPSS 1.61%
  • Veröffentlicht 18.11.2013 02:55:07
  • Zuletzt bearbeitet 29.04.2026 01:13:23

MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in a SVG file, which is then incorrectly interpreted a...

5

CVE-2013-2032

  • EPSS 1.01%
  • Veröffentlicht 18.11.2013 02:55:07
  • Zuletzt bearbeitet 29.04.2026 01:13:23

MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extens...

6.8

CVE-2013-2114

  • EPSS 1.4%
  • Veröffentlicht 18.11.2013 02:55:07
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

5

CVE-2013-4301

Exploit
  • EPSS 0.71%
  • Veröffentlicht 27.10.2013 00:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter...

5

CVE-2013-4302

  • EPSS 0.7%
  • Veröffentlicht 27.10.2013 00:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiTokens.php, and (7) ApiUnblock.php in includes/api/ in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 a...

4.3

CVE-2013-4305

Exploit
  • EPSS 0.19%
  • Veröffentlicht 11.10.2013 21:55:44
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

6.8

CVE-2013-4306

  • EPSS 0.23%
  • Veröffentlicht 11.10.2013 21:55:44
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform s...