Description

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."

Remediation

References

CVE-2010-1189

Related Vulnerabilities

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3295)

Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)

WordPress Plugin WHIZZ Cross-Site Scripting (1.0.7)

WordPress Plugin SI CAPTCHA Anti-Spam Serving Spam (3.0.2)

WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Security Bypass (1.12)

Severity

Medium

Classification

CVE-2010-1189 CWE-20

Tags

Missing Update Known Vulnerabilities