ID de Prueba:	1.3.6.1.4.1.25623.1.0.800982
Categoría:	Web application abuses
Título:	MediaWiki 1.14.0, 1.15.0 XSS Vulnerability
Resumen:	MediaWiki is prone to a cross-site scripting (XSS); vulnerability.
Descripción:	Summary: MediaWiki is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is due to the error in 'Special:Block' script in the 'getContribsLink' function in 'SpecialBlockip.php' page. It fails to properly sanitize user supplied input while processing the 'ip' parameter. Vulnerability Impact: Successful exploitation will allow remote attackers to include arbitrary HTML or web scripts in the scope of the browser and allows to obtain sensitive information. Affected Software/OS: MediaWiki versions 1.14.0 and 1.15.0 only. Solution: Update to version 1.14.1, 1.15.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4589 BugTraq ID: 35662 http://www.securityfocus.com/bid/35662 http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-July/000087.html http://osvdb.org/55824 http://secunia.com/advisories/35818 http://www.vupen.com/english/advisories/2009/1882 XForce ISS Database: mediawiki-specialblocks-xss(51687) https://exchange.xforce.ibmcloud.com/vulnerabilities/51687
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.