CVE-2005-0536
published 2005-05-02CVE-2005-0536: Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine…
PriorityP424medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.93%
77.9th percentile
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mediawiki | < mediawiki 1.4.9 (bookworm) | mediawiki 1.4.9 (bookworm) |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-whcw-cchg-x3hm: Directory traversal vulnerability in MediaWiki 1
ghsa_unreviewed·2022-05-01
CVE-2005-0536 [MEDIUM] GHSA-whcw-cchg-x3hm: Directory traversal vulnerability in MediaWiki 1
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
OSV
CVE-2005-0536: Directory traversal vulnerability in MediaWiki 1
osv·2005-05-02·CVSS 5.0
CVE-2005-0536 [MEDIUM] CVE-2005-0536: Directory traversal vulnerability in MediaWiki 1
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
Debian
CVE-2005-0536: mediawiki - Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta ...
vendor_debian·2005·CVSS 5.0
CVE-2005-0536 [MEDIUM] CVE-2005-0536: mediawiki - Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta ...
Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.
Scope: local
bookworm: resolved (fixed in 1.4.9)
bullseye: resolved (fixed in 1.4.9)
forky: resolved (fixed in 1.4.9)
sid: resolved (fixed in 1.4.9)
trixie: resolved (fixed in 1.4.9)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/14360http://securitytracker.com/id?1013260http://sourceforge.net/project/shownotes.php?release_id=307067http://www.gentoo.org/security/en/glsa/glsa-200502-33.xmlhttp://secunia.com/advisories/14360http://securitytracker.com/id?1013260http://sourceforge.net/project/shownotes.php?release_id=307067http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml
2005-05-02
Published