CVE-2005-1888
published 2005-06-06CVE-2005-1888: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.21%
65.3th percentile
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mediawiki | < mediawiki 1.4.9 (bookworm) | mediawiki 1.4.9 (bookworm) |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v2mr-w6wh-43qf: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2005-2215 [MEDIUM] GHSA-v2mr-w6wh-43qf: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
GHSA
GHSA-fjxw-77h7-chv3: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
ghsa_unreviewed·2022-05-01
CVE-2005-1888 [MEDIUM] GHSA-fjxw-77h7-chv3: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
OSV
CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
osv·2005-07-12·CVSS 4.3
CVE-2005-2215 [MEDIUM] CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
OSV
CVE-2005-1888: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
osv·2005-06-06·CVSS 4.3
CVE-2005-1888 [MEDIUM] CVE-2005-1888: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
Debian
CVE-2005-1888: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote...
vendor_debian·2005·CVSS 4.3
CVE-2005-1888 [MEDIUM] CVE-2005-1888: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote...
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
Scope: local
bookworm: resolved (fixed in 1.4.9)
bullseye: resolved (fixed in 1.4.9)
forky: resolved (fixed in 1.4.9)
sid: resolved (fixed in 1.4.9)
trixie: resolved (fixed in 1.4.9)
Debian
CVE-2005-2215: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 ...
vendor_debian·2005·CVSS 4.3
CVE-2005-2215 [MEDIUM] CVE-2005-2215: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 ...
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
Scope: local
bookworm: resolved (fixed in 1.4.9)
bullseye: resolved (fixed in 1.4.9)
forky: resolved (fixed in 1.4.9)
sid: resolved (fixed in 1.4.9)
trixie: resolved (fixed in 1.4.9)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sourceforge.net/project/shownotes.php?release_id=332231http://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.securityfocus.com/bid/13861http://sourceforge.net/project/shownotes.php?release_id=332231http://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.securityfocus.com/bid/13861
2005-06-06
Published