ID de Prueba:	1.3.6.1.4.1.25623.1.0.801900
Categoría:	Web application abuses
Título:	MediaWiki < 1.16.1 'Frames Processing Clickjacking' Information Disclosure Vulnerability
Resumen:	MediaWiki is prone to a clickjacking information disclosure; vulnerability.
Descripción:	Summary: MediaWiki is prone to a clickjacking information disclosure vulnerability. Vulnerability Insight: The flaw is caused by input validation errors when processing certain data via frames, which could allow clickjacking attacks. Vulnerability Impact: Successful exploitation will let remote attackers to hijack the victim's click actions and possibly launch further attacks against the victim. Affected Software/OS: MediaWiki versions prior to 1.16.1. Solution: Update to version 1.16.1 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0003 42810 http://secunia.com/advisories/42810 70272 http://www.osvdb.org/70272 ADV-2011-0017 http://www.vupen.com/english/advisories/2011/0017 FEDORA-2011-5807 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html FEDORA-2011-5812 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html FEDORA-2011-5848 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html [MediaWiki-announce] 20110104 MediaWiki security release 1.16.1 http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html [oss-security] 20110104 (possible) CVE request: Clickjacking in Mediawiki http://www.openwall.com/lists/oss-security/2011/01/04/6 [oss-security] 20110104 Re: (possible) CVE request: Clickjacking in Mediawiki http://www.openwall.com/lists/oss-security/2011/01/04/12 https://bugzilla.wikimedia.org/show_bug.cgi?id=26561 mediawiki-frames-clickjacking(64476) https://exchange.xforce.ibmcloud.com/vulnerabilities/64476
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.