CVE-2005-3167

Description

Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

References

http://www.securityfocus.com/bid/15024

http://www.novell.com/linux/security/advisories/2005_27_sr.html

http://sourceforge.net/project/shownotes.php?release_id=361505

http://secunia.com/advisories/17074

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3