CVE-2005-4031: High severity MediaWiki MediaWiki vulnerability
Published Dec 6, 2005
·Updated
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that is processed using the eval function.
Affected Software
8 affected components
MediaWiki MediaWiki=1.5.1
MediaWiki MediaWiki=1.5.2
MediaWiki MediaWiki=1.5_alpha2
MediaWiki MediaWiki=1.5.0
MediaWiki MediaWiki=1.5_beta3
MediaWiki MediaWiki=1.5_beta1
MediaWiki MediaWiki=1.5_beta2
MediaWiki MediaWiki=1.5_alpha1
Remediation
Patch Available
Patch Available
Event History
Dec 6, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4031?
CVE-2005-4031 is considered to have a high severity as it allows remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2005-4031?
To fix CVE-2005-4031, upgrade MediaWiki to version 1.5.3 or later.
3
Who is affected by CVE-2005-4031?
CVE-2005-4031 affects MediaWiki versions 1.5.0 through 1.5.2 and several alpha and beta versions.
4
What causes CVE-2005-4031 vulnerability?
CVE-2005-4031 is caused by an eval injection vulnerability related to the user language option in MediaWiki.
5
Can CVE-2005-4031 be exploited remotely?
Yes, CVE-2005-4031 can be exploited remotely, allowing attackers to run arbitrary PHP code on the server.