This host is running MediaWiki and is prone to XSS Vulnerability.

Successful exploitation will allow remote attackers to include arbitrary HTML or web scripts in the scope of the browser and allows to obtain sensitive information. Impact level: Application

Apply the patch or Upgrade to MediaWiki version to 1.14.1, 1.15.1 or higher, http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.1.patch.gz http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.1.patch.gz http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.1.tar.gz http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.1.tar.gz

The flaw is due to the error in 'Special:Block' script in the 'getContribsLink' function in 'SpecialBlockip.php' page. It fails to properly sanitize user-supplied input while processing the 'ip' parameter.

MediaWiki version 1.14.0 MediaWiki version 1.15.0

• http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-July/000087.html
• http://secunia.com/advisories/35818
• http://xforce.iss.net/xforce/xfdb/51687

---

Updated on 2015-03-25