FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mediawiki -- hardcoded placeholder string security bypass vulnerability

Affected packages
		mediawiki	<	1.5.4

Details

VuXML ID	99015cf5-c4dd-11da-b2fb-000e0c2e438a
Discovery	2005-12-22
Entry	2006-04-05

The mediawiki development team reports a vulnerability within the mediawiki application. The vulnerability is caused by improper checking of inline style attributes. This could result in the execution of arbitrary javascript code in Microsoft Internet Explorer. It appears that other browsers are not affected by this vulnerability.

References

Bugtraq ID	16032
CVE Name	CAN-2005-4501
URL	http://sourceforge.net/project/shownotes.php?release_id=379951