PT-2006-3813 · Mediawiki · Mediawiki

Publicado 2006-06-07 · Atualizado 2017-07-20 · CVE-2006-2895

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.6.0 through 1.6.6

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary HTML and web script via the edit form. This could potentially lead to unauthorized actions on the affected system.

Recommendations For MediaWiki versions 1.6.0 through 1.6.6, update to version 1.6.7 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-2895

Produtos afetados

Mediawiki

Referências · 7

• http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES · Correção
• http://secunia.com/advisories/20458 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27029 · Nota
• http://vupen.com/english/advisories/2006/2159 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2895 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2895 · Nota
• http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-June/000048.html · Correção