Description

MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message.

Remediation

References

CVE-2007-0894

Related Vulnerabilities

Squid Improper Input Validation Vulnerability (CVE-2009-2855)

WordPress Plugin Media Library Assistant Multiple Vulnerabilities (2.81)

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5882)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.24)

WebLogic CVE-2020-14557 Vulnerability (CVE-2020-14557)

Severity

Medium

Classification

CVE-2007-0894

Tags

Missing Update Known Vulnerabilities