Skip to content
OpenAdvisories
Unscored DSA-2366-1 6 CVEs

mediawiki - multiple

Published Dec 18, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 mediawiki 1:1.12.0-2lenny9
Debian · 6.0 mediawiki 1:1.15.5-2squeeze2

Vulnerabilities 6

  • Unscored —
    CVE-2011-1578

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allow…

    mediawiki Debian
  • Unscored —
    CVE-2011-1579

    The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly val…

    mediawiki Debian
  • Unscored —
    CVE-2011-1580

    The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote a…

    mediawiki Debian
  • Unscored —
    CVE-2011-1587

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allow…

    mediawiki Debian
  • Unscored —
    CVE-2011-4360

    MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of reque…

    mediawiki Debian
  • Unscored —
    CVE-2011-4361

    MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote at…

    mediawiki Debian