CVE-2010-1150

MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a...

CVE-2010-1150

MediaWiki is affected by a login CSRF vulnerability (CVE-2010-1150). A correctly authenticated, unintended login attempt can be exploited to induce a victim to log in to the attacker’s account and run a crafted user script, enabling phishing-style attacks. The issue affects MediaWiki versions pri...

CVE-2010-1150: Cross-Site Request Forgery (CSRF)

MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a...