This host is running MediaWiki and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Impact Level: Application

Upgrade to MediaWiki versions 1.16.0 or 1.15.5. For updates refer to http://www.mediawiki.org/wiki/Download

The flaw is caused by improper validation of user-supplied input passed via the 'filter' parameter to profileinfo.php, which allows attackers to execute arbitrary HTML and script code on the web server.

MediaWiki versions before 1.15.5

• http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69952
• http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69984
• https://bugzilla.redhat.com/show_bug.cgi?id=620225
• https://bugzilla.redhat.com/show_bug.cgi?id=620226

---

Updated on 2015-03-25