CVE-2008-1318

CVE-2008-1318 affects MediaWiki 1.11 before 1.11.2. The vulnerability is an information disclosure in the JSON API: remote attackers can obtain sensitive information by manipulating the JSON callback parameter. The underlying issue is in how the callback parameter is handled for JSON-formatted AP...