CVE-2004-2186: SQL Injection
Published Dec 31, 2004
·Updated
SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance.
Affected Software
1 affected component
MediaWiki MediaWiki=1.3.5
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 10, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2186?
CVE-2004-2186 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2004-2186?
To fix CVE-2004-2186, upgrade MediaWiki to a version later than 1.3.5 that does not contain this vulnerability.
3
What software versions are affected by CVE-2004-2186?
CVE-2004-2186 specifically affects MediaWiki version 1.3.5.
4
What type of vulnerability is CVE-2004-2186?
CVE-2004-2186 is an SQL injection vulnerability that allows attackers to manipulate SQL queries executed by the application.
5
What are the potential risks associated with CVE-2004-2186?
The risks associated with CVE-2004-2186 include unauthorized access to database information, data corruption, and the possibility of a complete system compromise.