ID de Prueba:	1.3.6.1.4.1.25623.1.0.900421
Categoría:	Web application abuses
Título:	MediaWiki < 1.6.11, 1.12.x < 1.12.2, 1.13.x < 1.13.3 Multiple Vulnerabilities (Dec 2008)
Resumen:	MediaWiki is prone to multiple vulnerabilities.
Descripción:	Summary: MediaWiki is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - input is not properly sanitised before being returned to the user - input related to uploads is not properly sanitised before being used - SVG scripts are not properly sanitised before being used - the application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary codes in the context of the web application and execute cross site scripting attacks. Affected Software/OS: MediaWiki versions prior to 1.6.11, 1.12.x through 1.12.1 and 1.13.0 through 1.13.2. Solution: Update to version 1.6.11, 1.12.2, 1.13.3 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5249 BugTraq ID: 32844 http://www.securityfocus.com/bid/32844 Debian Security Information: DSA-1901 (Google Search) http://www.debian.org/security/2009/dsa-1901 https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html http://secunia.com/advisories/33133 http://secunia.com/advisories/33349 Common Vulnerability Exposure (CVE) ID: CVE-2008-5250 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2008-5252
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.