peter bassill · operator
$ cve CVE-2007-0177 JSON

CVE-2007-0177 EXPLOIT

5.1
MEDIUM · CVSS 2.0 · EPSS 3.4% (pctl 89)

Patch early

A public exploit exists.

Description

Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Scoring

CVSS5.1 (MEDIUM, v2.0)
VectorAV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS3.44% — more likely to be exploited than 89% of all CVEs
On CISA KEVno
Public exploityes
Published2007-01-11
Last modified2026-06-16

Affected (1)

VendorProduct
mediawikimediawiki

Public exploits

SourceTitleDate
exploit-dbMediaWiki 1.x - 'AJAX index.php' Cross-Site Scripting2007-01-09

References

→ the Explorer  ·  watch your stack  ·  NVD