ID de Prueba:	1.3.6.1.4.1.25623.1.0.103058
Categoría:	Web application abuses
Título:	MediaWiki < 1.16.2 'CSS Comments' XSS Vulnerability
Resumen:	MediaWiki is prone to a cross-site scripting (XSS) vulnerability; because it fails to properly sanitize user-supplied input.
Descripción:	Summary: MediaWiki is prone to a cross-site scripting (XSS) vulnerability because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: MediaWiki versions prior to 1.16.2. Solution: Update to version 1.16.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0047 BugTraq ID: 46108 http://www.securityfocus.com/bid/46108 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html http://osvdb.org/70770 http://secunia.com/advisories/43142 http://www.vupen.com/english/advisories/2011/0273 XForce ISS Database: mediawiki-css-comments-xss(65126) https://exchange.xforce.ibmcloud.com/vulnerabilities/65126
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.