Lucene search
Ubuntu.comUB:CVE-2011-1587HistoryApr 27, 2011 - 12:00 a.m.
CVE-2011-1587
2011-04-2700:00:00
ubuntu.com
ubuntu.com
8
0.002 Low
EPSS
Percentile
60.0%
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when
Internet Explorer 6 or earlier is used, allows remote attackers to inject
arbitrary web script or HTML via an uploaded file accessed with a dangerous
extension such as .html located before a ? (question mark) in a query
string, in conjunction with a modified URI path that has a %2E sequence in
place of the . (dot) character. NOTE: this vulnerability exists because of
an incomplete fix for CVE-2011-1578.
Notes
| Author | Note |
|---|---|
| jdstrand | per Debian, not affected |
Related
cvelist
cvelist
cve
cve
prion
prion
Cross site scripting
2011-04-27 00:55:00
Cross site scripting
2011-05-23 22:55:00
Cross site scripting
2011-04-27 00:55:00
debiancve
debiancve
ubuntucve
ubuntucve
CVE-2011-1765
2011-05-23 00:00:00
CVE-2011-1578
2011-04-27 00:00:00
nessus
nessus
MediaWiki API XSS
2011-04-15 00:00:00
Debian DSA-2366-1 : mediawiki - multiple vulnerabilities
2012-01-12 00:00:00
Fedora 13 : mediawiki-1.16.4-58.fc13 (2011-5807)
2011-05-02 00:00:00
debian
debian
[SECURITY] [DSA 2366-1] mediawiki security update
2011-12-19 17:31:03
openvas
openvas
Debian: Security Advisory (DSA-2366-1)
2012-02-11 00:00:00
Debian Security Advisory DSA 2366-1 (mediawiki)
2012-02-11 00:00:00
Fedora Update for mediawiki FEDORA-2011-5812
2011-05-05 00:00:00
osv
osv
mediawiki - multiple
2011-12-18 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2366-1] mediawiki security update
2011-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: mediawiki-1.16.4-57.fc15
2011-04-21 05:28:33
[SECURITY] Fedora 15 Update: mediawiki-1.16.4-58.fc15
2011-04-26 16:04:53
[SECURITY] Fedora 14 Update: mediawiki-1.16.4-58.fc14
2011-04-30 23:24:28