vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2011-1765

N/A
Published: May 23, 2011 at 10:00 PM UTC
Updated: June 16, 2026 at 11:29 PM UTC
1 product affected across 1 vendorMediaWiki· also runs on 1 platform

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

MediaWiki· Mediawiki
95%
v ≤ 1.16.41.1.01.10.01.10.0 rc11.10.0 rc21.10.11.10.21.10.31.10.41.111.11.01.11.0 rc11.11.11.11.21.12.01.12.0 rc11.12.11.12.21.12.31.12.41.13.01.13.0 rc11.13.0 rc21.13.11.13.21.13.31.13.41.14.01.14.0 rc11.14.11.15.01.15.0 rc11.15.11.15.21.15.31.15.41.15.51.16.01.16.0 beta11.16.0 beta21.16.11.16.21.16.31.2.01.2.11.2.21.2.31.2.41.2.51.2.61.31.3.01.3.11.3.101.3.111.3.121.3.131.3.141.3.151.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.91.4 beta11.4 beta21.4 beta31.4 beta41.4 beta51.4 beta61.4.01.4.11.4.101.4.111.4.121.4.131.4.141.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.5 alpha11.5 alpha21.5 beta11.5 beta21.5 beta31.5 beta41.5 rc21.5 rc31.5 rc41.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5.81.6.01.6.11.6.101.6.111.6.121.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.91.7.01.7.11.7.21.7.31.8.01.8.11.8.21.8.31.8.41.8.51.9.01.9.0 rc21.9.11.9.21.9.31.9.41.9.51.9.6
microsoft-internet-explorer (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (8)

Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
Mailing Listx_refsource_MLISTPatch
Source: [email protected]
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/44684
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/47722
x_refsource_CONFIRMPatch
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=702512
x_refsource_CONFIRMExploit
Source: [email protected]
https://bugzilla.wikimedia.org/show_bug.cgi?id=28534

CVSS

4.3MEDIUM[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card