Lucene search
MitreCVELIST:CVE-2009-0737HistoryFeb 25, 2009 - 8:00 p.m.
CVE-2009-0737
2009-02-2520:00:00
mitre
www.cve.org
4
Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html
secunia.com/advisories/33881
svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES
svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES
svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES
www.debian.org/security/2009/dsa-1901
www.securityfocus.com/bid/33681
www.vupen.com/english/advisories/2009/0368
Related
openvas
openvas
MediaWiki 1.6.x < 1.6.12, 1.12.x < 1.12.4, 1.13.x < 1.13.4 Multiple XSS Vulnerabilities
2009-03-03 00:00:00
Debian: Security Advisory (DSA-1901-1)
2009-10-06 00:00:00
Debian Security Advisory DSA 1901-1 (mediawiki1.7)
2009-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2009-0737
2009-02-25 00:00:00
nessus
nessus
Fedora 10 : mediawiki-1.14.0-45.fc10 (2009-2231)
2009-04-23 00:00:00
Fedora 9 : mediawiki-1.14.0-45.fc9 (2009-2237)
2009-03-03 00:00:00
Debian DSA-1901-1 : mediawiki1.7 - several vulnerabilities
2010-02-24 00:00:00
cve
cve
CVE-2009-0737
2009-02-25 20:30:02
prion
prion
Cross site scripting
2009-02-25 20:30:00
nvd
nvd
CVE-2009-0737
2009-02-25 20:30:02
debiancve
debiancve
CVE-2009-0737
2009-02-25 20:30:02
debian
debian
[Backports-security-announce] Security Update for mediawiki
2009-03-07 21:52:25
[Backports-security-announce] Security Update for mediawiki
2009-03-07 21:52:35
osv
osv
mediawiki1.7 - several vulnerabilities
2009-10-05 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: mediawiki-1.14.0-45.fc9
2009-03-02 17:03:11
[SECURITY] Fedora 10 Update: mediawiki-1.14.0-45.fc10
2009-03-02 17:02:27