SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2011-0003

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.8
Exploit Score: 8.6
Impact Score: 4.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: NONE

Reference:

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html

http://www.openwall.com/lists/oss-security/2011/01/04/6

http://www.openwall.com/lists/oss-security/2011/01/04/12

https://bugzilla.wikimedia.org/show_bug.cgi?id=26561

mediawiki-frames-clickjacking(64476)


30479



423868



248149



909



194803



282