30809787c4
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
d9fc99ec4a
Correct false negative post_auth? status
2018-08-09 23:34:03 -05:00
6300758c46
use https for metaploit.com links
2017-07-24 06:26:21 -07:00
6870a48c48
Code suggestion from @jvoisin
2017-05-02 16:41:06 +02:00
006ed42248
Added fix information
...
https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/0002
09.html
2017-05-01 09:01:14 +02:00
673dbdc4b9
Code review feedback from h00die
2017-04-29 20:37:39 +02:00
fcf14212b4
Fixed disclosure date
2017-04-29 16:25:25 +02:00
f9e7715adb
Fixed formatting
2017-04-29 16:07:45 +02:00
1569d2cf8e
MediaWiki SyntaxHighlight extension exploit module
...
This module exploits an option injection vulnerability in the SyntaxHighlight extension of MediaWiki. It tries to create & execute a PHP file in the document root. The USERNAME & PASSWORD options are only needed if the Wiki is configured as private.
2017-04-29 14:29:56 +02:00
Alan Foster