CVE-2005-3165

Опубликовано: 06 окт. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.

Ссылки

http://lwn.net/Articles/153906/
Vendor Advisory
http://secunia.com/advisories/16932
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=352777
Patch
http://lwn.net/Articles/153906/
Vendor Advisory
http://secunia.com/advisories/16932
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=352777
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*

cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00268

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3165

debian

почти 20 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki befor ...

GHSA-6gx9-22p7-84wm

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.