Security Advisory

CVE-2005-4501

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-12-22 21:00:00
Last updated 2024-08-07 23:46:05
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inline style attributes, which are processed by Internet Explorer.