Skip to content
OpenAdvisories
Unscored DTSA-186-1 4 CVEs

mediawiki - several vulnerabilities

Published Jan 25, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 mediawiki 1:1.12.0-2lenny2

Vulnerabilities 4

  • Unscored —
    CVE-2008-5249

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary…

    mediawiki Debian
  • Unscored —
    CVE-2008-5250

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, wh…

    mediawiki Debian
  • Unscored —
    CVE-2008-5252

    Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x…

    mediawiki Debian
  • Unscored —
    CVE-2008-5687

    MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted …

    mediawiki Debian