CVE-2005-4031

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-06 · updated 2026-06-16

Description

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function.

Affected products

Wikimedia Foundation MediaWiki: 1.5.0, 1.5.1, 1.5.2, 1.5_alpha1, 1.5_alpha2, 1.5_beta1 (+2)

References

http://secunia.com/advisories/17866
http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=375755
http://www.kb.cert.org/vuls/id/392156
http://www.securityfocus.com/bid/15703
http://www.vupen.com/english/advisories/2005/2726
http://secunia.com/advisories/17866
http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=375755
http://www.kb.cert.org/vuls/id/392156
http://www.securityfocus.com/bid/15703
http://www.vupen.com/english/advisories/2005/2726

Get alerted when CVE-2005-4031 or the next vulnerability affects your stack