3 matches found
CVE-2012-1580
Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...
CVE-2012-1580
Cross-site request forgery CSRF vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files...
CVE-2012-1580
CVE-2012-1580 describes a CSRF vulnerability in MediaWiki’s Special:Upload. Affected software is MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2. The underlying issue allows remote attackers to hijack the authentication of unspecified victims for requests that upload files. The impact is ...