CVE Vulnerabilities

CVE-2005-1888

Published: Jun 06, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.

Affected Software

NameVendorStart VersionEnd Version
MediawikiMediawiki1.3 (including)1.3 (including)
MediawikiMediawiki1.3.1 (including)1.3.1 (including)
MediawikiMediawiki1.3.2 (including)1.3.2 (including)
MediawikiMediawiki1.3.3 (including)1.3.3 (including)
MediawikiMediawiki1.3.4 (including)1.3.4 (including)
MediawikiMediawiki1.3.5 (including)1.3.5 (including)
MediawikiMediawiki1.3.6 (including)1.3.6 (including)
MediawikiMediawiki1.3.7 (including)1.3.7 (including)
MediawikiMediawiki1.3.8 (including)1.3.8 (including)
MediawikiMediawiki1.3.9 (including)1.3.9 (including)
MediawikiMediawiki1.3.10 (including)1.3.10 (including)
MediawikiMediawiki1.3.11 (including)1.3.11 (including)
MediawikiMediawiki1.4_beta1 (including)1.4_beta1 (including)
MediawikiMediawiki1.4_beta2 (including)1.4_beta2 (including)
MediawikiMediawiki1.4_beta3 (including)1.4_beta3 (including)
MediawikiMediawiki1.4_beta4 (including)1.4_beta4 (including)
MediawikiMediawiki1.4_beta5 (including)1.4_beta5 (including)
MediawikiMediawikistable_2003-08-29 (including)stable_2003-08-29 (including)
MediawikiMediawikistable_2003-11-07 (including)stable_2003-11-07 (including)
MediawikiMediawikistable_2003-11-17 (including)stable_2003-11-17 (including)

References