CVE-2005-4031: Mediawiki

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function.

Affected products

• Mediawiki Mediawiki: version 1.5.0 only; version 1.5.1 only; version 1.5.2 only; version 1.5_alpha1 only; version 1.5_alpha2 only; version 1.5_beta1 only; …

Published 2005-12-06. Last modified 2026-06-16.