PT-2011-1383 · Mediawiki · Mediawiki

Raphael Geissert · Publicado 2011-04-27 · Atualizado 2011-07-19 · CVE-2010-2789

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki version 1.16 beta

Description A remote file inclusion issue in MediaWikiParserTest.php allows remote attackers to execute arbitrary PHP code when register globals is enabled.

Recommendations For MediaWiki version 1.16 beta, consider disabling the register globals setting as a temporary workaround until a patch is available.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-2789

Produtos afetados

Mediawiki

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-2789 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/07/29/4 · Nota
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2789 · Nota