Description

Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.

Remediation

References

CVE-2008-1318

Related Vulnerabilities

MySQL CVE-2020-14845 Vulnerability (CVE-2020-14845)

WordPress Ultimate Member Plugin Other Vulnerability (CVE-2022-3383)

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3783)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4668)

Oracle JRE CVE-2014-2422 Vulnerability (CVE-2014-2422)

Severity

Medium

Classification

CVE-2008-1318 CWE-200

Tags

Missing Update Known Vulnerabilities