MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-12-22 21:03
Updated : 2017-07-20 01:29
NVD link : CVE-2005-4501
Mitre link : CVE-2005-4501
CVE.ORG link : CVE-2005-4501
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE