Search for vulnerabilities
Vulnerability ID | VCID-238y-3y2c-aaaj |
Aliases |
CVE-2012-2698
|
Summary | Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to inject arbitrary web script or HTML via the uselang parameter to index.php/Main_page. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 3.9 |
Risk | 7.8 |
Affected and Fixed Packages | Package Details |
Data source | Exploit-DB |
---|---|
Date added | June 17, 2012 |
Description | MediaWiki 1.x - 'uselang' Cross-Site Scripting |
Ransomware campaign use | Known |
Source publication date | June 17, 2012 |
Exploit type | webapps |
Platform | php |
Source update date | June 27, 2015 |
Source URL | https://www.securityfocus.com/bid/53998/info |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.87742 |
EPSS Score | 0.01783 |
Published At | Dec. 17, 2024, midnight |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |