CVE-2012-1580

Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...

CVE-2012-1580

CVE-2012-1580 describes a CSRF vulnerability in MediaWiki’s Special:Upload. Affected software is MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2. The underlying issue allows remote attackers to hijack the authentication of unspecified victims for requests that upload files. The impact is ...

Gentoo Security Advisory GLSA 201206-09 (MediaWiki)

The remote host is missing updates announced in advisory GLSA 201206-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...