Download MediaWiki 1.11.1 / 1.10.3 / 1.9.5

Mediawiki is a wiki engine, released under the gpl license, that can be used to create and manage content. It is used, among other things, for the websites of the Wikimedia Foundation, such as Wikipedia, Wiktionary, Wikisource, Wikibooks and Wikiquote. The appearance can be completely adjusted to your own wishes with the help of skins, on this page are some examples of different skins. The developers have fixed an xss vulnerability with Internet Explorer and released a series of new versions with 1.11.1, 1.10.3 and 1.9.5 as the version numbers:

Version 1.11.1 / 1.10.3 / 1.9.5:

This is a security and bugfix release of the Fall, Spring, and Winter 2007 snapshot releases of MediaWiki. A potential XSS injection vector affecting api.php only for Microsoft Internet Explorer users has been closed.

To work around the vulnerability without upgrading, you may disable the API if you don’t need it:

~ $wgEnableAPI = false;

Not vulnerable versions:

• 1.12 or later
• 1.11 >= 1.11.1
• 1.10 >= 1.10.3
• 1.9 >= 1.9.5
• 1.8 any version (if $wgEnableAPI has been left off)

Vulnerable versions:

• 1.11
• 1.10
• 1.9
• 1.8 any version (if $wgEnableAPI has been switched on)

MediaWiki 1.7 and below are not affected as they do not include the API functionality, however the BotQuery extension is similarly vulnerable unless updated to the latest SVN version.[break]The following files can be downloaded:
MediaWiki 1.11.1
MediaWiki 1.10.3
MediaWiki 1.9.5