Posted by Trancer on Feb 18 2007

MediaWikiSecurity Advisory for MediaWiki versions:
1.6.x branch before 1.6.10
1.7.x branch before 1.7.3
1.8.x branch before 1.8.4
1.9.x branch before 1.9.3

Vulnerabilities found:

  • Cross-Site Scripting
  • UTF-7 Cross-Site Scripting

TXT Format TXT version.

Also on:
BID 21956
MediaWiki patch announcement
RSnake expand the MediaWiki 1.9.2 UTF-7 XSS exploit

Categories: Advisories

Leave a Reply


Follow Recognize-Security on Twitter