Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:cargo:3.6.0:*:*:*:*:*:*:*

part: a version: 3.6.0 update: *

VendorMediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5)
ProductCargo (4f519ef0-bc75-50c7-a3d1-50cc64320bea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47849 vulnerable 2026-06-03 14:57:02.530379 Backticks can allow the usage of not-allowed SQL functions
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
Published: 2024-10-05T00:29:44.438Z
Updated: 2024-10-07T17:36:40.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47847 vulnerable 2026-06-03 14:57:02.526577 Various XSSes found in Cargo
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
Published: 2024-10-05T00:47:24.147Z
Updated: 2024-10-07T17:18:43.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47846 vulnerable 2026-06-03 14:57:02.525794 Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection
Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
Published: 2024-10-05T00:39:58.084Z
Updated: 2024-10-07T17:35:25.194Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.