| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.5.0= 1.5.1= 1.5.2= 1.5_alpha1= 1.5_alpha2= 1.5_beta1= 1.5_beta2= 1.5_beta3 |
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free