Openpedia.org > MediaWiki Installer Cross-Site Scripting Vulnerabilities - Secunia ...

[Latest Secunia Advisories] Some vulnerabilities have been reported in MediaWiki, which can be exploited by malicious people to conduct cross-site scripting attacks.

Previous [Previous] Streetsblog » Wiki Wednesday: Twenty’s Plenty...

Next [Next] Use Languages - MediaWiki Forums...

Some related posts from Technorati and Google.

[MediaWiki Forums] Mediawiki 1.13.4,1.12.4,1.6.12 and 1.14.0rc1 released - MediaWiki ...: It was release to fix security vulnerabilities and to protect you from the WMF virus. MediaWiki 1.5.5 and...">MediaWiki 1.5.5 Released

[Latest Secunia Advisories] Avaya Products OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing ...: Avaya has acknowledged a vulnerability in various Avaya products, which can be exploited by malicious people to conduct spoofing attacks.

[www.pwnage.ro] usa.kaspersky.com Pwned | www.pwnage.ro: It’s probably because they have been smoking up up to the skies for too long celebrating somewhat of a popularity on the AV market. A slap doesn’t hurt from time to time…just so too keep them in focus and concentrated.

[Latest Secunia Advisories] Trend Micro InterScan Web Security Suite Security Bypass - Secunia ...: MediaWiki Installer Cross-Site Scripting Vulnerabilities // 99 views. 4. Gentoo update for sudo // 96 views. 5. Avaya Products OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing // 85 views. 6. Avaya CMS Solaris IP-in-IP Processing Denial ...

[SecurityFocus Vulnerabilities] MediaWiki 'useskin' Cross-Site Scripting Vulnerability: Vulnerable: RedHat Fedora 9 0 RedHat Fedora 8 0 MediaWiki MediaWiki 1.13.1 MediaWiki MediaWiki 1.13 MediaWiki MediaWiki 1.12. Not Vulnerable: MediaWiki MediaWiki 1.13.2 MediaWiki MediaWiki 1.12.1 .

[F-Secure Vulnerability Descriptions] F-Secure Vulnerability Information : MediaWiki Multiple ...: Some vulnerabilities have been reported in MediaWiki, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting and request forgery attacks.

[Kitchens in the Zoo] Cross Site Scripting (XSS) and Denial of Service (DoS) using AJAX ...: But there is another reason why it is dangerous for an AJAX client to be able to call any server: Scripts have access to cookies and the URL, which means they have access to session IDs. If scripts can send data anywhere, they can easily hijack the session ID and pass it back to a malicious server.

[Thoda sa main...(A little bit of me)] Cheat Sheets: Networking, Hacking, Security, Administration, Tools: Here is a bunch of CheatSheets which might be useful from time to time to use as a reference: # TCP/IP and tcpdump Cheat Sheet - SANS.org # Google Hacking and Defense Cheat Sheet - SANS.org # Intrusion Discovery Cheat Sheet Windows .

[Wouter Veugelen blog] Cheat Sheets: Below I grouped a few links to networking and security related cheat sheets which I find usefull from time to time to use as a reference:. TCP/IP and tcpdump Cheat Sheet - SANS.org.

[US-CERT Cyber Security Bulletins] US-CERT Cyber Security Bulletin SB08-357 -- Vulnerability Summary ...: Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync components in Message Archiver;

[Bill's blog] DIY: Private Video Sharing for a school, a district, or an ...: Unlike Wordpress, where a blog post can effectively be owned by one user, content in Mediawiki is accessible and editable by a wider range of site members. While this can be restricted by use of access control settings in Mediawiki, setting up and using access controls over pages in Mediawiki is not intuitive (at least not relative to the other options being discussed here).

[www.pwnage.ro] Backtrack 4 will be a full blown distribution | www.pwnage.ro: GBook "abspath" File Inclusion Vulnerability · Elecard AVC HD Player Playlist Processing Buffer Overflow · Oracle Forms Cross-Site Scripting Vulnerabilities · Oracle Application Server Cross-Site Scripting Vulnerabilities .\/ More Options .

Reflected tags on Technorati: Blog, , , ,