CVE-2007-4828

Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Link	Resource
http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html	Patch
http://secunia.com/advisories/26772	Patch Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=287881
http://fedoranews.org/updates/FEDORA-2007-218.shtml
http://www.securityfocus.com/bid/25632
http://secunia.com/advisories/26870
http://www.vupen.com/english/advisories/2007/3130
https://exchange.xforce.ibmcloud.com/vulnerabilities/36558

Configuration 1

cpe:2.3:a:mediawiki:mediawiki:1.8.2:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.11_development:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.9.3:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.8.0:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.9.2:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.9.1:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.10.1:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.8.3:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.8.4:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.8.1:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.9.0:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:1.10.0:*:*:*:*:*:*:*

---

Published : 2007-09-12 07:17

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-4828

Mitre link : CVE-2007-4828

No products.

CWE-79