cpe:/a:mediawiki:mediawiki:1.3.5 CVE-2004-2185 2004-12-31T00:00:00.000-05:00 2008-09-05T16:43:26.097-04:00 6.8 NETWORK MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2005-07-15T11:28:00.000-04:00 ALLOWS_OTHER_ACCESS BID 11416 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=275099 Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage.