Total vulnerabilities in the database
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.
Software | From | Fixed in |
---|---|---|
mediawiki / mediawiki | - | 1.17.1 |
debian / debian_linux | 5.0 | 5.0.x |
debian / debian_linux | 6.0 | 6.0.x |