Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2013-4305

Опубликовано: 11 окт. 2013
Источник: debian
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mediawiki-extensionsremovedpackage

Примечания

  • https://bugzilla.wikimedia.org/show_bug.cgi?id=49070

  • Just an example file

EPSS

Процентиль: 40%
0.00186
Низкий

Связанные уязвимости

ubuntu
больше 12 лет назад

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

nvd
больше 12 лет назад

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

EPSS

Процентиль: 40%
0.00186
Низкий