This host is running MediaWiki and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to MediaWiki version 1.17.5, 1.18.4, or 1.19.1 or later. For updates refer to http://www.mediawiki.org/wiki/MediaWiki

Input passed via the 'uselang' parameter to 'index.php/Main_page' is not properly sanitised in the 'outputPage()' function, before being returned to the user.

MediaWiki versions prior to 1.17.5, 1.8.x before 1.18.4 and 1.19.x before 1.19.1

• http://secunia.com/advisories/49484
• http://securitytracker.com/id?1027179
• http://www.openwall.com/lists/oss-security/2012/06/14/2
• http://www.osvdb.org/82983
• http://xforce.iss.net/xforce/xfdb/76311
• https://bugzilla.wikimedia.org/show_bug.cgi?id=36938

---

Updated on 2015-03-25