PT-2005-5183 · Wikimedia+1 · Mediawiki+1

Publicado 2005-12-22 · Atualizado 2017-07-20 · CVE-2005-4501

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.5.4

Description The issue allows remote attackers to bypass protection against cross-site scripting (XSS) attacks. This is achieved by utilizing a hard-coded internal placeholder string, enabling the execution of Javascript using inline style attributes that are processed by Internet Explorer.

Recommendations For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-4501

Produtos afetados

Internet Explorer

Mediawiki

Referências · 12

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4501 · Aviso do Fabricante
• http://securityfocus.com/bid/16032 · Correção
• http://vupen.com/english/advisories/2005/3059 · Nota
• https://osv.dev/vulnerability/CVE-2005-4501 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4501 · Nota de Segurança
• http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-4501 · Aviso do Fabricante
• http://mediawiki.org/wiki/Download · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23882 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4501 · Nota
• http://secunia.com/advisories/18219 · Aviso do Fabricante
• http://secunia.com/advisories/18717 · Nota