CVE

Id
64252  
CVE No.
CVE-2013-4305  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633827 64252 CVE-2013-4305 MLIST:[MediaWiki-announce] 20130903 MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633828 64252 CVE-2013-4305 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html  View
633829 64252 CVE-2013-4305 MLIST:[oss-security] 20130904 Re: CVE request: MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633830 64252 CVE-2013-4305 URL:http://seclists.org/oss-sec/2013/q3/553  View
633831 64252 CVE-2013-4305 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=49070  View
633832 64252 CVE-2013-4305 OSVDB:96909  View
633833 64252 CVE-2013-4305 URL:http://osvdb.org/96909  View
633834 64252 CVE-2013-4305 XF:mediawiki-cve20134305-xss(86890)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22796 JVNDB-2013-004371 Apache Struts におけるアクセス制御を回避される脆弱性 Apache Struts には、アクセス制御を回避される脆弱性が存在します。 CVE-2013-4310 64252 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004371.html  View