) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:mediawiki:mediawiki:1.8.0
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2007-1054 |
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer. Published: February 21, 2007; 6:28:00 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2007-1055 |
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177. Published: February 21, 2007; 6:28:00 PM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2007-0894 |
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message. Published: February 12, 2007; 6:28:00 PM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2007-0177 |
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: January 10, 2007; 7:28:00 PM -0500 |
V3.x:(not available) V2.0: 5.1 MEDIUM |