• info
• discussion
• exploit
• solution
• references

MediaWiki Encoded Page Link HTML Injection Vulnerability

Solution:

The vendor has released versions 1.5.8 and 1.4.15 to address this issue.


MediaWiki MediaWiki 1.4.14

• MediaWiki mediawiki-1.4.15.tar.gz
  http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.15.tar.gz

MediaWiki MediaWiki 1.5.7

• MediaWiki mediawiki-1.5.8.tar.gz
  http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.8.tar.gz