Beveiligingsadvies

CVE-2011-0537

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-02-04 00:00:00

Laatst bijgewerkt 2024-08-06 21:58:25

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function.

← Alle CVE's bekijken Bekijk op cve.org ↗