CVE-2011-0537

2011-02-0400:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Multiple directory traversal vulnerabilities in (1) languages/Language.php
and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions
before 1.16.2, when running on Windows and possibly Novell Netware, allow
remote attackers to include and execute arbitrary local PHP files via
vectors related to a crafted language file and the Language::factory
function.