exploit/multi/http/mediawiki_syntaxhighlight

functional

MediaWiki SyntaxHighlight extension option injection vulnerability

view exploit source metasploittype exploitpublished 2017-04-06catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-0372US	critical9.8	11.3% (96th)	Exploit	2018-04-13
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.