medium5.8
CVE-2011-0003
MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Impact
MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.16.0 Versions 1.1.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html
- http://secunia.com/advisories/42810
- http://www.openwall.com/lists/oss-security/2011/01/04/12
- http://www.openwall.com/lists/oss-security/2011/01/04/6
- http://www.osvdb.org/70272
- http://www.vupen.com/english/advisories/2011/0017
- https://bugzilla.wikimedia.org/show_bug.cgi?id=26561
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64476
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html
- http://secunia.com/advisories/42810
- http://www.openwall.com/lists/oss-security/2011/01/04/12
- http://www.openwall.com/lists/oss-security/2011/01/04/6
- http://www.osvdb.org/70272
- http://www.vupen.com/english/advisories/2011/0017
- https://bugzilla.wikimedia.org/show_bug.cgi?id=26561
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64476