CVE-2008-0460: XSS
Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0460?
CVE-2008-0460 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-0460?
To fix CVE-2008-0460, update MediaWiki to a version that includes the security patch addressing this XSS vulnerability.
Which versions of MediaWiki are affected by CVE-2008-0460?
CVE-2008-0460 affects MediaWiki versions from 1.7.0 through 1.11.0rc1, as well as the BotQuery extension for MediaWiki 1.7 and earlier.
Can CVE-2008-0460 be exploited by a remote attacker?
Yes, CVE-2008-0460 allows remote attackers to inject arbitrary web scripts or HTML via Internet Explorer.
What is the impact of CVE-2008-0460 on users?
The impact of CVE-2008-0460 can lead to unauthorized actions being performed on behalf of users, as their sessions may be hijacked.