Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:mediawiki:1.5_rc2:*:*:*:*:*:*:*

part: a version: 1.5_rc2 update: *

VendorMediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5)
ProductMediawiki (ab97168e-95e7-5d6e-a2ac-f8d27117dc4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.700548
pkg:wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.700550

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0894 vulnerable 2026-06-03 14:27:58.330566 Details available
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.
Published: 2007-02-12T23:00:00.000Z
Updated: 2024-08-07T12:34:21.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1498 vulnerable 2026-06-03 14:27:24.462410 Details available
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links.
Published: 2006-03-30T00:00:00.000Z
Updated: 2024-08-07T17:12:22.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0322 vulnerable 2026-06-03 14:27:20.471788 Details available
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service (infinite loop) via "certain malformed links."
Published: 2006-01-19T21:00:00.000Z
Updated: 2024-08-07T16:34:13.580Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.