Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Wiki

MediaWiki

MediaWiki is a free software wiki package written in PHP originally for use on Wikipedia. It is now used by several other projects of the non-profit Wikimedia Foundation and by many other wikis. MediaWiki is designed to be run on a large server farm for a website that gets millions of hits per day.

Official Site:

https://www.mediawiki.org/wiki/MediaWiki

Severity Summary:

Critical: 18 High: 63 Medium: 267 Low: 12
Reference
Title
Severity
CVE-2020-35480
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2020-35624
MediaWiki Observable Differences in Behavior to Error Inputs Vulnerability
Medium
CVE-2007-1055
MediaWiki Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2019-19910
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-12467
MediaWiki Vulnerability
Medium
CVE-2019-12471
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-12469
MediaWiki Missing Authorization Vulnerability
Medium
CVE-2019-12470
MediaWiki Missing Authorization Vulnerability
Medium
CVE-2019-16738
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2019-19709
MediaWiki URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2020-6163
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-0505
MediaWiki Improper Authentication Vulnerability
Medium
CVE-2020-10960
MediaWiki Improper Encoding or Escaping of Output Vulnerability
Medium
CVE-2020-10959
MediaWiki URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2020-25812
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-25813
MediaWiki Vulnerability
Medium
CVE-2020-25814
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-25815
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-25828
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-13258
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2018-0504
MediaWiki Insertion of Sensitive Information into Log File Vulnerability
Medium
CVE-2020-29002
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-8811
MediaWiki Improper Input Validation Vulnerability
Medium
CVE-2020-29003
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-27621
MediaWiki Other Vulnerability
Medium
CVE-2020-27957
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-6333
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-6334
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-6336
MediaWiki Improper Access Control Vulnerability
Medium
CVE-2017-8808
MediaWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium