CVE

Id
64255  
CVE No.
CVE-2013-4308  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to inject arbitrary web script or HTML via a thread subject.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633856 64255 CVE-2013-4308 MLIST:[MediaWiki-announce] 20130903 MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633857 64255 CVE-2013-4308 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html  View
633858 64255 CVE-2013-4308 MLIST:[oss-security] 20130904 Re: CVE request: MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633859 64255 CVE-2013-4308 URL:http://seclists.org/oss-sec/2013/q3/553  View
633860 64255 CVE-2013-4308 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=53320  View
633861 64255 CVE-2013-4308 BID:62218  View
633862 64255 CVE-2013-4308 URL:http://www.securityfocus.com/bid/62218  View
633863 64255 CVE-2013-4308 OSVDB:96906  View
633864 64255 CVE-2013-4308 URL:http://osvdb.org/96906  View
633865 64255 CVE-2013-4308 XF:mediawiki-cve20134308-xss(86891)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22582 JVNDB-2013-004157 Moodle における Microsoft SQL Server に対して SQL インジェクション攻撃を実行される脆弱性 Moodle は、クエリ文字列内の 文字の使用を適切に制限しないため、Microsoft SQL Server に対して SQL インジェクション攻撃を実行される脆弱性が存在します。 CVE-2013-4313 64255 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004157.html  View