CVE-2005-0535
Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.
- Update to 1.4.9
Published Updated
PatchFirst · Latest vulnerabilities
mediawiki vulnerabilities · Page 15
Vulnerabilities published for mediawiki in the last 30 days: 9. Listed in the KEV catalogue: 0.
Vulnerabilities: 283
CVE-2005-0534
Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script.
- Update to 1.4.9
Published UpdatedCVE-2004-1405
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
- Update to 1.4.9
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.