Description

Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

Remediation

References

CVE-2005-3167

Related Vulnerabilities

MySQL CVE-2020-14888 Vulnerability (CVE-2020-14888)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-5301)

Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047)

WordPress Plugin MW WP Form Arbitrary File Upload (5.0.1)

Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-15839)

Severity

Medium

Classification

CVE-2005-3167

Tags

Missing Update Known Vulnerabilities