Description

Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to delete arbitrary files or determine file existence via a parameter related to image deletion.

Remediation

References

CVE-2005-0536

Related Vulnerabilities

WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll SQL Injection (1.1.91)

Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1165)

CubeCart Session Fixation Vulnerability (CVE-2021-33394)

WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Request Forgery (1.0.16)

WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2005-0536