CVE-2008-1318

Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.

• CWE-200

• http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.htmlPatch
• http://secunia.com/advisories/29216Patch, Vendor Advisory
• http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES
• http://www.securityfocus.com/bid/28070Patch
• http://www.securitytracker.com/id?1019535
• http://www.vupen.com/english/advisories/2008/0732/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40960
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.htmlPatch
• http://secunia.com/advisories/29216Patch, Vendor Advisory
• http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES
• http://www.securityfocus.com/bid/28070Patch
• http://www.securitytracker.com/id?1019535
• http://www.vupen.com/english/advisories/2008/0732/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40960

Published

Mar 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1312Unspecified vulnerability in the TFTP server in PacketTrap N…
• CVE-2008-1313Multiple SQL injection vulnerabilities in index.php in Bloo …
• CVE-2008-1314SQL injection vulnerability in the Johannes Hass gaestebuch …
• CVE-2008-1315SQL injection vulnerability in the ZClassifieds module for P…
• CVE-2008-1316SQL injection vulnerability in qtf_ind_search_ov.php in QT-c…
• CVE-2008-1317Unspecified vulnerability in the Inter-Process Communication…
• CVE-2008-1319Untrusted search path and argument injection vulnerability i…
• CVE-2008-1320Multiple buffer overflows in ASG-Sentry Network Manager 7.0.…
• CVE-2008-1321The FxIAList service in ASG-Sentry Network Manager 7.0.0 and…
• CVE-2008-1322The File Check Utility (fcheck.exe) in ASG-Sentry Network Ma…
• CVE-2008-1323Cross-site request forgery (CSRF) vulnerability in index.php…
• CVE-2008-1324Multiple directory traversal vulnerabilities in index.php in…