NVD

Id
53262  
Name
CVE-2007-1054  
Description
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-21  
Modified Date
2011-03-07  
Seq
2007-1054  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269631 53262 CVE-2007-1054 20070221 [unsure] MediaWiki Cross-site Scripting  View
269632 53262 CVE-2007-1054 2274  View
269633 53262 CVE-2007-1054 http://sourceforge.net/project/shownotes.php?release_id=487921&group_id=34373  View
269634 53262 CVE-2007-1054 http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_3/phase3/RELEASE-NOTES  View
269635 53262 CVE-2007-1054 http://www.bugsec.com/articles.php?Security=24  View
269636 53262 CVE-2007-1054 20070220 MediaWiki Cross-site Scripting  View
269637 53262 CVE-2007-1054 ADV-2007-0678  View
269638 53262 CVE-2007-1054 mediawiki-index-xss(32586)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54714 JVNDB-2007-003406 MediaWiki の AJAX 機能におけるクロスサイトスクリプティングの脆弱性 MediaWiki の index.php の AJAX 機能には、$wgUseAjax が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1054 24409 CVE-2007-1054 53262 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003406.html 2007-02-21 2012-09-25 View