Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-0737HistoryFeb 25, 2009 - 8:30 p.m.
CVE-2009-0737
2009-02-2520:30:02
Debian Security Bug Tracker
security-tracker.debian.org
13
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
70.3%
Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mediawiki | < 1:1.14.0-1 | mediawiki_1:1.14.0-1_all.deb |
| Debian | 11 | all | mediawiki | < 1:1.14.0-1 | mediawiki_1:1.14.0-1_all.deb |
| Debian | 999 | all | mediawiki | < 1:1.14.0-1 | mediawiki_1:1.14.0-1_all.deb |
| Debian | 13 | all | mediawiki | < 1:1.14.0-1 | mediawiki_1:1.14.0-1_all.deb |
Related
openvas
openvas
MediaWiki 1.6.x < 1.6.12, 1.12.x < 1.12.4, 1.13.x < 1.13.4 Multiple XSS Vulnerabilities
2009-03-03 00:00:00
Debian: Security Advisory (DSA-1901-1)
2009-10-06 00:00:00
Debian Security Advisory DSA 1901-1 (mediawiki1.7)
2009-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2009-0737
2009-02-25 00:00:00
nessus
nessus
Fedora 10 : mediawiki-1.14.0-45.fc10 (2009-2231)
2009-04-23 00:00:00
Fedora 9 : mediawiki-1.14.0-45.fc9 (2009-2237)
2009-03-03 00:00:00
Debian DSA-1901-1 : mediawiki1.7 - several vulnerabilities
2010-02-24 00:00:00
cve
cve
CVE-2009-0737
2009-02-25 20:30:02
prion
prion
Cross site scripting
2009-02-25 20:30:00
cvelist
cvelist
CVE-2009-0737
2009-02-25 20:00:00
nvd
nvd
CVE-2009-0737
2009-02-25 20:30:02
debian
debian
[Backports-security-announce] Security Update for mediawiki
2009-03-07 21:52:25
[Backports-security-announce] Security Update for mediawiki
2009-03-07 21:52:35
osv
osv
mediawiki1.7 - several vulnerabilities
2009-10-05 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: mediawiki-1.14.0-45.fc9
2009-03-02 17:03:11
[SECURITY] Fedora 10 Update: mediawiki-1.14.0-45.fc10
2009-03-02 17:02:27
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
70.3%
Related for DEBIANCVE:CVE-2009-0737