This host is running MediaWiki and clickjacking information disclosure vulnerability.

Successful exploitation will let remote attackers to hijack the victim's click actions and possibly launch further attacks against the victim. Impact level: Application

Upgrade to MediaWiki 1.16.1 or later, For updates refer to http://www.mediawiki.org/wiki/Download

The flaw is caused by input validation errors when processing certain data via frames, which could allow clickjacking attacks.

MediaWiki version prior to 1.16.1

• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html
• http://osvdb.org/70272
• http://secunia.com/advisories/42810
• http://www.vupen.com/english/advisories/2011/0017
• http://xforce.iss.net/xforce/xfdb/64476

---

Updated on 2015-03-25