CVE-2005-1888

CVE-2005-1888 is an XSS vulnerability in MediaWiki prior to 1.4.5 where remote attackers can inject arbitrary script via HTML attributes in page templates. The SUSE entry confirms the same description; other connected documents reiterate the vulnerability without new technical details. Exploit sp...

CVE-2005-1888

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...

[SA15590] MediaWiki HTML Attributes Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

MediaWiki < 1.3.13 / 1.4.5 / 1.5.0 alpha2 Page Template Inclusions HTML Attributes XSS

According to its self-reported version number, the installation of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input passed to certain HTML attributes when including a template inside a style directive when...

CVE-2005-1888

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...

CVE-2005-1888

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...

DEBIAN-CVE-2005-1888

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-0536

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion...

CVE-2005-0536

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion...

DEBIAN-CVE-2005-0534

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script...

DEBIAN-CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-0534

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script...

CVE-2005-0534

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script...

DEBIAN-CVE-2005-0536

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1245

CVE-2005-1245 is an XSS vulnerability in MediaWiki prior to 1.4.2 when HTML Tidy is enabled via $wgUseTidy. The flaw allows remote attackers to inject arbitrary web script or HTML through unknown vectors. Affected product: MediaWiki (before 1.4.2). The root cause and precise exploit vectors are n...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

MediaWiki < 1.3.11 Multiple Remote Vulnerabilities

The remote host appears is running a version of MediaWiki prior to 1.3.11. It is, therefore, affected by various vulnerabilities, including some that allow an attacker to execute arbitrary PHP code on the remote host. Note that Nessus has not tested for these issues but has instead relied only on...