ID de Prueba:	1.3.6.1.4.1.25623.1.0.801877
Categoría:	Web application abuses
Título:	MediaWiki < 1.15.5 'profileinfo.php' XSS Vulnerability - Active Check
Resumen:	MediaWiki is prone to a cross-site scripting (XSS); vulnerability.
Descripción:	Summary: MediaWiki is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw is caused by improper validation of user-supplied input passed via the 'filter' parameter to profileinfo.php, which allows attackers to execute arbitrary HTML and script code on the web server. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Affected Software/OS: MediaWiki versions prior to 1.15.5. Solution: Update to version 1.15.5, 1.16.0 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2788 42024 http://www.securityfocus.com/bid/42024 FEDORA-2011-5495 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html FEDORA-2011-5807 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html FEDORA-2011-5812 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html FEDORA-2011-5848 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html [mediawiki-announce] 20100728 MediaWiki security release: 1.16.0 and 1.15.5 http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html [oss-security] 20100729 Re: CVE request: mediawiki http://openwall.com/lists/oss-security/2010/07/29/4 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69952 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69984 https://bugzilla.redhat.com/show_bug.cgi?id=620225 https://bugzilla.redhat.com/show_bug.cgi?id=620226
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.