https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 22:37:20 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-566 https://vulnerability.circl.lu/vuln/cnvd-2015-08498 cnvd-2015-08498 https://vulnerability.circl.lu/vuln/cnvd-2015-08498 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8625 <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-8625 https://vulnerability.circl.lu/vuln/ghsa-55w7-r459-9wqm <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> https://vulnerability.circl.lu/vuln/ghsa-55w7-r459-9wqm https://vulnerability.circl.lu/vuln/gsd-2015-8625 gsd-2015-8625 https://vulnerability.circl.lu/vuln/gsd-2015-8625 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8625 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mediawiki</p> <p>MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-8625