CVE-2005-3165

published 2005-10-06

CVE-2005-3165: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) tags or (2)…

Priority P4 12 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) tags or (2) Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
debian	mediawiki	< mediawiki 1.4.9 (bookworm)	mediawiki 1.4.9 (bookworm)
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	—	—
mediawiki	mediawiki	>= 0 < 1.4.9	1.4.9
mediawiki	mediawiki	>= 0 < 1.4.9	1.4.9
mediawiki	mediawiki	>= 0 < 1.4.9	1.4.9
mediawiki	mediawiki	>= 0 < 1.4.9	1.4.9

CVSS provenance

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

osv 4.3 MEDIUM

vendor_debian 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.