NVD

Id
8508  
Name
CVE-2011-1578  
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-04-26  
Modified Date
2012-01-18  
Seq
2011-1578  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48890 8508 CVE-2011-1578 FEDORA-2011-5495  View
48891 8508 CVE-2011-1578 FEDORA-2011-5848  View
48892 8508 CVE-2011-1578 FEDORA-2011-5812  View
48893 8508 CVE-2011-1578 FEDORA-2011-5807  View
48894 8508 CVE-2011-1578 [mediawiki-announce] 20110412 MediaWiki security release 1.16.3  View
48895 8508 CVE-2011-1578 [oss-security] 20110413 Re: CVE request: mediawiki 1.16.3  View
48896 8508 CVE-2011-1578 DSA-2366  View
48897 8508 CVE-2011-1578 47354  View
48898 8508 CVE-2011-1578 ADV-2011-0978  View
48899 8508 CVE-2011-1578 ADV-2011-1100  View
48900 8508 CVE-2011-1578 ADV-2011-1151  View
48901 8508 CVE-2011-1578 mediawiki-file-extensions-xss(66737)  View
48902 8508 CVE-2011-1578 https://bugzilla.redhat.com/show_bug.cgi?id=695577  View
48903 8508 CVE-2011-1578 https://bugzilla.redhat.com/show_bug.cgi?id=696360  View
48904 8508 CVE-2011-1578 https://bugzilla.wikimedia.org/show_bug.cgi?id=28235  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34209 JVNDB-2011-004451 MediaWiki におけるクロスサイトスクリプティングの脆弱性 MediaWiki は、Internet Explorer 6 またはそれ以前のバージョンが使われた際、 クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1578 49485 CVE-2011-1578 8508 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004451.html 2011-04-26 2012-03-27 View