CVE-2010-2788

Cross-site scripting XSS vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

PT-2011-1382

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.15.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This occurs via the filter parameter when wgEnableProfileInfo is enabled. Recommendations...

CVE-2010-2788

CVE-2010-2788 is a cross-site scripting (XSS) vulnerability in MediaWiki, affecting profiles via profileinfo.php. It occurs in MediaWiki releases prior to 1.15.5 when wgEnableProfileInfo is enabled, allowing remote attackers to inject arbitrary web script or HTML through the filter parameter. Con...

MediaWiki profileinfo.php 'filter' Parameter XSS

The version of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to the 'filter' parameter in the 'profileinfo.php' script. A remote attacker can exploit this, by tricking a user into requesting a maliciously...