Поиск уязвимостей
Количество 5
Количество 5
CVE-2014-3966
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username.
CVE-2014-3966
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username.
CVE-2014-3966
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in M ...
GHSA-6789-p69v-h59w
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username.
ALT-PU-2014-1960
ALT-PU-2014-1960: package `mediawiki` update to version 1.23.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-3966 Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username. | CVSS2: 2.6 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-3966 Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username. | CVSS2: 2.6 | 2% Низкий | больше 12 лет назад |
| CVE-2014-3966 Cross-site scripting (XSS) vulnerability in Special:PasswordReset in M ... | CVSS2: 2.6 | 2% Низкий | больше 12 лет назад |
| GHSA-6789-p69v-h59w Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username. | 2% Низкий | больше 4 лет назад | |
| ALT-PU-2014-1960 ALT-PU-2014-1960: package `mediawiki` update to version 1.23.1-alt1 | CVSS2: 4.3 | больше 12 лет назад |
Уязвимостей на страницу