Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Happy-Melon

#52835of 53,633
3.5Total CVSS
Vulnerabilities · 1
PT-2011-3234
3.5
2011-04-27
Wikimedia · Mediawiki · CVE-2011-1580
**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.16.3 **Description** The issue concerns the transwiki import functionality, which does not properly check privileges. This allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request. **Recommendations** For versions prior to 1.16.3, update to version 1.16.3 or later to resolve the issue.