Description

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

Remediation

References

CVE-2011-4360

Related Vulnerabilities

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3838)

Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3638)

WordPress Plugin Slimstat Analytics Cross-Site Scripting (5.0.8)

Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-28334)

WordPress Plugin Product Reviews Import Export for WooCommerce Cross-Site Request Forgery (1.3.2)

Severity

Medium

Classification

CVE-2011-4360 CWE-200

Tags

Missing Update Known Vulnerabilities