Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:mediawiki:1.11_development:*:*:*:*:*:*:*

part: a version: 1.11_development update: *

VendorMediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5)
ProductMediawiki (ab97168e-95e7-5d6e-a2ac-f8d27117dc4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.596942
pkg:wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.596944

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0537 vulnerable 2026-06-03 14:30:49.663220 Details available
Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function.
Published: 2011-02-04T00:00:00.000Z
Updated: 2024-08-06T21:58:25.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4828 vulnerable 2026-06-03 14:28:19.502249 Details available
Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2007-09-12T19:00:00.000Z
Updated: 2024-08-07T15:08:33.908Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.