64 matches found
Fedora Update for mediawiki FEDORA-2014-6961
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-6453
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML...
CVE-2013-6453
CVE-2013-6453 affects MediaWiki versions prior to certain fixes (notably 1.19.x, 1.21.x, and 1.22.x) where SVG files were not properly sanitized, enabling remote attackers to influence the system via invalid XML. CVSS v2 base score 7.5 (Network exploit, no authentication) with partial impact on c...
Fedora Update for mediawiki FEDORA-2014-5684
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mediawiki FEDORA-2014-4511
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mediawiki FEDORA-2014-4478
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2891-2] mediawiki regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2891-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 31, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2891-1] mediawiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2891-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 30, 2014 http://www.debian.org/security/faq -...
Fedora Update for mediawiki FEDORA-2014-3344
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mediawiki FEDORA-2014-3338
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2014-0113 Updated mediawiki packages fix security vulnerabilities
MediaWiki user Michael M reported that the fix for CVE-2013-4568 allowed insertion of escaped CSS values which could pass the CSS validation checks, resulting in XSS CVE-2013-6451. Chris from RationalWiki reported that SVG files could be uploaded that include external stylesheets, which could lea...
CVE-2012-6453
Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...
CVE-2012-6453
Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...
CVE-2012-6453
Cross-site scripting XSS vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed...
CVE-2012-6453
CVE-2012-6453 affects the RSS Reader extension for MediaWiki prior to version 0.2.6. The vulnerability arises from improper escaping in feed content, allowing remote attackers to inject arbitrary JavaScript/HTML into MediaWiki pages via a crafted feed. Several connected sources (Debian/DSA-2596-1...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6453)
This update fixes a single critical security issues in the SUSE Linux Enterprise 10 SP 2 kernel. - A missing check in the MSGPROBE handling can be used to execute privileges to root. CVE-2009-2698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...
CVE-2008-6453
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
CVE-2008-6453
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
CVE-2008-6453
CVE-2008-6453 affects 6rbScript 3.3. A directory traversal flaw in section.php can be exploited when magic_quotes_gpc is disabled to read arbitrary files by supplying a double-dot (.. ) in the name parameter. The NVD entry notes a remote-access vector with MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N...
