p PatchFirst

CVE-2005-3167

CVE-2005-3167

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mediawiki Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.11-1

    Update to 1.4.11-1

  • mediawiki Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.11-1

    Update to 1.4.11-1

  • mediawiki Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.11-1

    Update to 1.4.11-1

Original sources

Check your server →