CVE-2007-4828

CVE-2007-4828 is an XSS vulnerability in the API pretty-printing mode of MediaWiki. Affected are MediaWiki 1.8.0–1.8.4, 1.9.0–1.9.3, 1.10.0–1.10.1, and 1.11 development versions prior to 1.11.0. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors. There is no...

CVE-2007-4828: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

mediawiki -- cross site scripting vulnerability

The MediaWiki development team reports: A possible HTML/XSS injection vector in the API pretty-printing mode has been found and fixed. The vulnerability may be worked around in an unfixed version by simply disabling the API interface if it is not in use, by adding this to LocalSettings.php:...

CVE-2006-2637

The CVE-2006-2637 entry describes a cross-site scripting (XSS) vulnerability in view.php of TuttoPhp variants Morris Guestbook 1, Pretty Guestbook 1, and Smile Guestbook 1. An attacker can inject arbitrary script/HTML by providing a javascript: URI in the SRC attribute of an IMG element via the p...

PT-2002-2789 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: PGP versions 6.x through 7.x Description: The issue allows attackers to recover sensitive information that was supposed to be deleted by not clearing Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-1809 · Pgp +1 · Pgp +1

Name of the Vulnerable Software and Affected Versions: PGP version 7.0.3 Description: The issue arises from an interaction between PGP and the Windows Encrypted File System EFS when the "wipe deleted files" option is used. This interaction creates cleartext temporary files that cannot be wiped or...