Description
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Splash Header Cross-Site Scripting (1.20.7)
Moodle Other Vulnerability (CVE-2006-6626)
Internet Information Services Other Vulnerability (CVE-2000-0025)
Oracle Database Server CVE-2006-0268 Vulnerability (CVE-2006-0268)
WordPress Plugin ABC Test 'id' Parameter Cross-Site Scripting (0.1)