CVE-2005-2396: XSS
Published Jul 27, 2005
·Updated
Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the page move template.
Affected Software
31 affected components
MediaWiki MediaWiki=1.2.4
MediaWiki MediaWiki=1.4.1
MediaWiki MediaWiki=1.4.3
MediaWiki MediaWiki=1.3.5
MediaWiki MediaWiki=1.3.6
MediaWiki MediaWiki=1.4.2
MediaWiki MediaWiki=1.4_beta6
MediaWiki MediaWiki=1.2.1
MediaWiki MediaWiki=1.4_beta3
MediaWiki MediaWiki=1.2.2
MediaWiki MediaWiki=1.2.5
MediaWiki MediaWiki=1.3
MediaWiki MediaWiki=1.3.10
MediaWiki MediaWiki=1.3.4
MediaWiki MediaWiki=1.3.9
MediaWiki MediaWiki=1.4_beta4
MediaWiki MediaWiki=1.2.6
MediaWiki MediaWiki=1.3.0
MediaWiki MediaWiki=1.4.5
MediaWiki MediaWiki=1.1.0
MediaWiki MediaWiki=1.4_beta1
MediaWiki MediaWiki=1.3.3
MediaWiki MediaWiki=1.2.3
MediaWiki MediaWiki=1.3.1
MediaWiki MediaWiki=1.2.0
MediaWiki MediaWiki=1.3.7
MediaWiki MediaWiki=1.3.11
MediaWiki MediaWiki=1.3.8
MediaWiki MediaWiki=1.3.2
MediaWiki MediaWiki=1.4_beta2
MediaWiki MediaWiki=1.4_beta5
Remediation
Patch Available
Patch Available
Event History
Jul 27, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2396?
CVE-2005-2396 is classified as a moderate severity vulnerability due to its potential for XSS attacks.
2
How do I fix CVE-2005-2396?
To fix CVE-2005-2396, upgrade MediaWiki to version 1.4.7 or later.
3
What versions of MediaWiki are affected by CVE-2005-2396?
CVE-2005-2396 affects MediaWiki 1.4.6 and earlier versions.
4
What type of vulnerability is CVE-2005-2396?
CVE-2005-2396 is a cross-site scripting (XSS) vulnerability.
5
What could happen if CVE-2005-2396 is exploited?
Exploitation of CVE-2005-2396 could allow remote attackers to inject arbitrary web scripts or HTML.