Intrusion PreventionMediaWiki.Parser.Script.Insertion.XSS
Description
This indicates an attack attempt against a cross-site scripting (XSS) vulnerability in MediaWiki.
The vulnerability exists in includes/Sanitizer.php in the variable handler. It is caused by the application's inability to properly sanitize user-supplied input. It may allow a remote attacker to execute arbitrary script.
Affected Products
MediaWiki versions prior to 1.6.6
Impact
Arbitrary Javascript Injection.
Recommended Actions
Upgrade to MediaWiki version 1.6.6:
http://www.mediawiki.org/wiki/Download
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 13355 |
| Created | Oct 18, 2006 |
| Updated | Nov 03, 2021 |
| Risk |
|
| CVE ID | CVE-2006-2611 |
| Exploit Prediction Score | 9.6% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |