CVE

Id
49677  
CVE No.
CVE-2011-1765  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539476 49677 CVE-2011-1765 MLIST:[mediawiki-announce] 20110505 MediaWiki security release 1.16.5  View
539477 49677 CVE-2011-1765 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html  View
539478 49677 CVE-2011-1765 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=702512  View
539479 49677 CVE-2011-1765 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=28534  View
539480 49677 CVE-2011-1765 FEDORA:FEDORA-2011-6774  View
539481 49677 CVE-2011-1765 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html  View
539482 49677 CVE-2011-1765 FEDORA:FEDORA-2011-6775  View
539483 49677 CVE-2011-1765 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html  View
539484 49677 CVE-2011-1765 FEDORA:FEDORA-2011-6781  View
539485 49677 CVE-2011-1765 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html  View
539486 49677 CVE-2011-1765 BID:47722  View
539487 49677 CVE-2011-1765 URL:http://www.securityfocus.com/bid/47722  View
539488 49677 CVE-2011-1765 SECUNIA:44684  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31582 JVNDB-2011-001822 Linux kernel の dccp_parse_options 関数における整数アンダーフローの脆弱性 Linux kernel の dccp_parse_options 関数 (net/dccp/options.c) には、整数アンダーフローの脆弱性が存在します。 CVE-2011-1770 49677 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001822.html  View