Description

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.

Remediation

References

CVE-2011-4360

Related Vulnerabilities

Ruby Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-16255)

WordPress Plugin YARPP-Yet Another Related Posts Multiple Vulnerabilities (4.2.4)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14329)

Drupal Resource Management Errors Vulnerability (CVE-2012-1588)

WordPress Plugin AppPresser-Mobile App Framework Cross-Site Scripting (1.1.4)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2011-4360