CVE-2013-4303: Improper Neutralization of Input During Web Page Generation

includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of "." period characters in a string, which allows remote attackers to conduct cross-site...