MediaWiki Multiple Vulnerabilities Dec08

Published: 2008-12-29 12:55:43
CVE Author: NIST National Vulnerability Database (NVD)

CVSS Base Vector:

Successful exploitation will allow attacker to execute arbitrary codes in the context of the web application and execute cross site scripting attacks.

Affected Versions:
MediaWiki version 1.13.0 to 1.13.2 MediaWiki version 1.12.x to 1.12.1 MediaWiki versions prior to 1.6.11.

Technical Details:
The flaws are due to, - input is not properly sanitised before being returned to the user - input related to uploads is not properly sanitised before being used - SVG scripts are not properly sanitised before being used - the application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.

Upgrade to the latest versions 1.13.3, 1.12.2 or 1.6.11.

This host is running MediaWiki and is prone to Multiple Vulnerabilities.

Solution Type:
Vendor Patch

Detection Type:
Remote Banner Unreliable

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)

SecurityFocus Bugtraq ID:


CVSS Score

You never have to pay for a vulnerability scanning and management software again.

Tired of paying a subscription 'per asset' or 'per IP'? Well you can officially cancel your current subscription. Mageni provides a free, open source and enterprise-ready vulnerability scanning and management platform which helps you to find, prioritize, remediate and manage your vulnerabilities. It is free and always will be.