Vulnerabilities > CVE-2007-1054 - Unspecified vulnerability in Mediawiki

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
mediawiki
nessus
NVD
Published: 2007-02-21
Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer.

Vulnerable Configurations

Part Description Count
Application
Mediawiki
114

Nessus

NASL familyFedora Local Security Checks
NASL idFEDORA_2007-1442.NASL
descriptionThis update fixes the following vulnerability :
last seen2020-06-01
modified2020-06-02
plugin id27715
published2007-11-06
reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/27715
titleFedora 7 : mediawiki-1.9.3-34.0.2.fc7 (2007-1442)

References