CVE-2004-2185 in MediaWiki

Resumen

por MITRE

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 2005-07-11
• Divulgación: 2004-12-31
• Moderación: aceptado
• Artículo: VDB-23097
• CPE: listo
• CWE: CWE-80 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.02039
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider, Agriculture, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2185
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2185
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2185/