Download MediaWiki 1.9.3/1.8.4/1.7.3/1.6.10

MediaWiki is a Wiki engine, released under the GPL license, that can be used to create and manage content. It is used, among others, for the websites of the Wikimedia Foundation, such as Wikipedia, Wikipedia, Wikisource, Wikibooks and Wikiquote. The appearance can be completely adjusted to your own wishes with the help of skins this page are some examples of different skins. The developers fixed XSS vulnerability with Internet Explorer and released a series of new versions with 1.9.3, 1.8.4, 1.7.3 and 1.6.10 as the version numbers. The following announcement is included:

Version 1.9.3 / 1.8.4 / 1.7.3 / 1.6.10

An XSS injection vulnerability based on Microsoft Internet Explorer’s UTF-7 charset autodetection was located in the AJAX support module, affecting MSIE users on MediaWiki 1.6.x and up when the optional setting $wgUseAjax is enabled.

If you are using an extension based on the optional Ajax module, either disable it or upgrade to a version containing the fix.

There is no known danger in the default configuration, with $wgUseAjax off.

• Add ‘charset’ to Content-Type headers on various HTTP error responses to forestall additional UTF-7-autodetect XSS issues. PHP sends only ‘text/html’ by default when the script didn’t specify more details, which some inconsiderate browsers consider a license to autodetect the deadly, hard-to-escape UTF-7.
  This fixes an issue with the Ajax interface error message on MSIE when $wgUseAjax is enabled (not default configuration); this UTF-7 variant on a previously fixed attack vector was discovered by Moshe BA from BugSec
• Trackback responses now specify XML content type
• Version 1.6.10/1.8.4: (bug 8819) Fix full path disclosure with skins dependencies
• Version 1.9.3: (bug 8992) Fix a remaining raw use of REQUEST_URI in history
• Version 1.9.3: (bug 8984) Fix a database error in Special:Recentchangeslinked when using the PostgreSQL database.

[break]The following files can be downloaded:
MediaWiki 1.9.3
MediaWiki 1.8.4
MediaWiki 1.7.3
MediaWiki 1.6.10