Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

MediaWiki: multiple vulnerabilities

Package(s):

mediawiki

CVE #(s):

CAN-2005-0534 CAN-2005-0535 CAN-2005-0536

Created:

February 28, 2005

Updated:

June 13, 2005

Description:

A security audit of the MediaWiki project discovered that MediaWiki is vulnerable to several cross-site scripting and cross-site request forgery attacks, and that the image deletion code does not sufficiently sanitize input parameters.

Alerts:

Gentoo	200506-12	2005-06-13
Gentoo	200502-33	2005-02-28

(Log in to post comments)