| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-3455 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) CreateProperty, (2) CreateTemplate, (3) CreateForm, and (4) CreateClass special pages in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x be
|
13-05-2014 - 17:56 | 12-05-2014 - 14:55 | |
| CVE-2014-3454 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requ
|
13-05-2014 - 17:53 | 12-05-2014 - 14:55 | |
| CVE-2013-6472 | 5.0 |
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user watchlists.
|
13-05-2014 - 14:43 | 12-05-2014 - 14:55 | |
| CVE-2013-6454 | 4.3 |
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribute.
|
13-05-2014 - 14:21 | 12-05-2014 - 14:55 | |
| CVE-2013-6453 | 7.5 |
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
|
13-05-2014 - 14:01 | 12-05-2014 - 14:55 | |
| CVE-2013-6452 | 4.3 |
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.
|
13-05-2014 - 13:36 | 12-05-2014 - 14:55 | |
| CVE-2013-4574 | 4.3 |
Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to videos.
|
12-05-2014 - 16:38 | 12-05-2014 - 14:55 | |
| CVE-2013-4571 | 7.5 |
Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors.
|
12-05-2014 - 16:32 | 12-05-2014 - 14:55 | |
| CVE-2013-4570 | 5.0 |
The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via v
|
12-05-2014 - 16:13 | 12-05-2014 - 14:55 |