CVE-2007-0894
N/A
Published: February 12, 2007 at 11:00 PM UTC
Updated: June 16, 2026 at 10:36 PM UTC
1 product affected across 1 vendorMediaWiki
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
1.1.01.2.01.2.11.2.21.2.31.2.41.2.51.2.61.31.3.01.3.11.3.101.3.111.3.121.3.131.3.141.3.151.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.91.4.11.4.101.4.111.4.121.4.131.4.141.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.4_beta11.4_beta21.4_beta31.4_beta41.4_beta51.4_beta61.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5_alpha11.5_alpha21.5_beta11.5_beta21.5_beta31.5_beta41.5_rc21.5_rc31.5_rc41.6.01.6.11.6.21.6.31.6.41.6.51.6.5_r143481.6.61.7.01.7.11.8.01.8.11.8.21.9.0 rc21.9.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (9)
x_refsource_CONFIRMExploit
Source: [email protected]
http://bugzilla.wikimedia.org/show_bug.cgi?id=8819x_refsource_CONFIRMPatch
Source: [email protected]
http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=19681Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/459793/100/0/threadedQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card