Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:mediawik:i1.15.0:*:*:*:*:*:*:*

part: a version: i1.15.0 update: *

VendorMediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5)
ProductMediawik (f0dd8259-3576-5671-b8e0-308cef73ea42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mediawiki purl2cpe 2026-06-01 10:10:57.549160
pkg:deb/ubuntu/mediawiki purl2cpe 2026-06-01 10:10:57.549164
pkg:github/wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.549166
pkg:rpm/fedora/mediawiki purl2cpe 2026-06-01 10:10:57.549169
pkg:rpm/opensuse/mediawiki purl2cpe 2026-06-01 10:10:57.549172

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4589 vulnerable 2026-06-03 14:29:58.286028 Details available
Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter.
Published: 2010-01-07T18:13:00.000Z
Updated: 2024-08-07T07:08:38.047Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.