FreeBSD : mediawiki -- XSS vulnerability (74b7403c-c4d5-11da-b2fb-000e0c2e438a)

The mediawiki development team reports that there is an site scripting vulnerability within mediawiki. The vulnerability is caused by improper checking of encoded links which could allow the injection of html in the output generated by mediawiki. This could lead to cross site scripting attacks...

CVE-2006-1498

Cross-site scripting XSS vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links...

CVE-2006-1498

Cross-site scripting XSS vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links...

CVE-2001-1498

Technical details about CVE-2001-1498 are not provided in the connected documents. The initial description notes a buffer overflow in mod_bf 0.2 allowing local command execution, but specifics (versions, root cause, exploit) are not disclosed here. Monitor for updates.

CVE-2005-1498

CVE-2005-1498 affects myBloggie 2.1.1 with multiple XSS vulnerabilities: parameters year (viewmode.php) and cat_id, month_no, post_id (index.php) that are not properly sanitized before display in error messages. Connected OpenVAS entry confirms multiple vulnerabilities in myBloggie and lists this...

CVE-2002-1498

Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "" characters...

CVE-2002-1498

Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "" characters...

CVE-1999-1498

Slackware Linux 3.4 pkgtool is affected by a local vulnerability where a symlink attack on the reply file allows reading and writing to arbitrary files. Root cause: symlink manipulation enabling unintended access. Impact per the description: partial confidentiality and partial integrity; availabi...