CVSS: 4.3EPSS: 9%CPEs: 2EXPL: 2CVE-2006-2611
https://notcve.org/view.php?id=CVE-2006-2611
Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote attackers to inject arbitrary Javascript via unspecified vectors, possibly involving the usage of the | (pipe) character. • http://bugzilla.wikimedia.org/show_bug.cgi?id=6055 http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035814.html http://nickj.org/MediaWiki http://secunia.com/advisories/20189 http://svn.wikimedia.org/viewvc/mediawiki/trunk/phase3/includes/Sanitizer.php?r1=14349&r2=14348&pathrev=14349 http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=14349 http://www.osvdb.org/25713 http://www.vupen.com/english&#x •
CVSS: 4.3EPSS: 0%CPEs: 45EXPL: 0CVE-2005-4501
https://notcve.org/view.php?id=CVE-2005-4501
MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer. • http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html http://secunia.com/advisories/18219 http://secunia.com/advisories/18717 http://www.mediawiki.org/wiki/Download http://www.securityfocus.com/bid/16032 http://www.vupen.com/english/advisories/2005/3059 https://exchange.xforce.ibmcloud.com/vulnerabilities/23882 •
CVSS: 4.3EPSS: 0%CPEs: 31EXPL: 0CVE-2005-2396
https://notcve.org/view.php?id=CVE-2005-2396
Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template. Vulnerabilidad de secuencia de comandos en sitios cruzados en MediaWiki 1.4.6 y anteriores permite que atacantes remotos inyecten script web arbitrario o HTML mediante un parámetro a la plantilla de mover página. • http://secunia.com/advisories/15950 http://secunia.com/advisories/16130 http://security.gentoo.org/glsa/glsa-200507-18.xml http://www.osvdb.org/17763 http://www.securityfocus.com/bid/14327 https://exchange.xforce.ibmcloud.com/vulnerabilities/21491 •
CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 0CVE-2004-2152
https://notcve.org/view.php?id=CVE-2004-2152
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML. • http://secunia.com/advisories/12692 http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848 http://www.osvdb.org/10454 http://www.securityfocus.com/bid/11302 https://exchange.xforce.ibmcloud.com/vulnerabilities/17578 •