https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T22:37:20.463530+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 CERTFR-2015-AVI-566 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mediawiki</span>. Certaines d'entre elles perme… 2026-10-11T22:37:20.471399+00:00 CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/cnvd-2015-08498 cnvd-2015-08498 2026-10-11T22:37:20.471542+00:00 cnvd-2015-08498 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8625 fkie_cve-2015-8625 2026-10-11T22:37:20.471578+00:00

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.

 https://vulnerability.circl.lu/vuln/ghsa-55w7-r459-9wqm GHSA-55w7-r459-9wqm 2026-10-11T22:37:20.471637+00:00

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.

 https://vulnerability.circl.lu/vuln/gsd-2015-8625 gsd-2015-8625 2026-10-11T22:37:20.471666+00:00 gsd-2015-8625 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8625 Withdrawn: UBUNTU-CVE-2015-8625 2026-10-11T22:37:20.471688+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: mediawiki

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.