Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0737
HistoryFeb 25, 2009 - 12:00 a.m.

CVE-2009-0737

2009-02-2500:00:00
ubuntu.com
ubuntu.com
12

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

70.3%

Multiple cross-site scripting (XSS) vulnerabilities in the web-based
installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before
1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow
remote attackers to inject arbitrary web script or HTML via unspecified
vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmediawiki< 1:1.11.2-2ubuntu0.3UNKNOWN
ubuntu8.10noarchmediawiki< 1:1.12.0-2ubuntu0.3UNKNOWN
ubuntu9.04noarchmediawiki< 1:1.13.3-1ubuntu2UNKNOWN
ubuntu9.10noarchmediawiki< 1:1.13.3-1ubuntu2UNKNOWN

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

70.3%