1.4.9

DATE	CVE	VULNERABILITY TITLE	RISK
2005-12-22	CVE-2005-4501	Unspecified vulnerability in Mediawiki MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer. network mediawiki	4.3
2005-10-06	CVE-2005-3167	Cross-Site Scripting vulnerability in MediaWiki HTML Inline Style Attributes Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks. network mediawiki	4.3
2005-10-06	CVE-2005-3166	Denial-Of-Service vulnerability in Mediawiki Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption of the previous submission) via a crafted URL. network low complexity mediawiki	5.0