Skip to content
OpenAdvisories
Unscored DSA-1901-1 4 CVEs

mediawiki1.7 - several vulnerabilities

Published Oct 5, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 mediawiki1.7 1.7.1-9etch1

Vulnerabilities 4

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, wh…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 befo…