CVE-2008-1318

  • Last update: Apr 13, 2023

Description

Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.

Software From Fixed in
mediawiki / mediawiki 1.11 1.11.x
mediawiki / mediawiki 1.11.1 1.11.1.x

Details

    • Severity: Medium
  • CVE: CVE-2008-1318
  • Published: Mar 13, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs