CVE-2005-2215
published 2005-07-12CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.21%
65.3th percentile
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mediawiki | < mediawiki 1.4.9 (bookworm) | mediawiki 1.4.9 (bookworm) |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2005-2215: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 ...
vendor_debian·2005·CVSS 4.3
CVE-2005-2215 [MEDIUM] CVE-2005-2215: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 ...
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
Scope: local
bookworm: resolved (fixed in 1.4.9)
bullseye: resolved (fixed in 1.4.9)
forky: resolved (fixed in 1.4.9)
sid: resolved (fixed in 1.4.9)
trixie: resolved (fixed in 1.4.9)
GHSA
GHSA-v2mr-w6wh-43qf: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2005-2215 [MEDIUM] GHSA-v2mr-w6wh-43qf: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
OSV
CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
osv·2005-07-12·CVSS 4.3
CVE-2005-2215 [MEDIUM] CVE-2005-2215: Cross-site scripting (XSS) vulnerability in MediaWiki before 1
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/15950http://sourceforge.net/project/shownotes.php?release_id=340290http://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.securityfocus.com/bid/14181http://secunia.com/advisories/15950http://sourceforge.net/project/shownotes.php?release_id=340290http://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.securityfocus.com/bid/14181
2005-07-12
Published