Gentoo Security Advisory GLSA 201206-09 (MediaWiki)

The remote host is missing updates announced in advisory GLSA 201206-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] [DSA 2366-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2366-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire December 18, 2011 http://www.debian.org/security/faq -...

Fedora Update for mediawiki FEDORA-2011-5807

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1579

MediaWiki prior to 1.16.3 is vulnerable via the checkCss function in includes/Sanitizer.php, which fails to validate CSS token sequences and can be exploited to perform cross-site scripting or expose sensitive information using hex sequences like \2f\2a and \2a\2f to surround CSS comments. The De...