Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 06:27:40 +0000 certa-2011-avi-261 — Plusieurs vulnérabilités ont été corrigés avec la version 1.16.3 de MediaWiki. Deux d'entre-elles permettent de réalise… https://cve.radiocsirt.org/vuln/certa-2011-avi-261 certa-2011-avi-261 https://cve.radiocsirt.org/vuln/certa-2011-avi-261 EUVD-2026-114860 https://cve.radiocsirt.org/vuln/euvd-2026-114860 EUVD-2026-114860 https://cve.radiocsirt.org/vuln/euvd-2026-114860 fkie_cve-2011-1578 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1578 <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1578 GHSA-84xm-3937-g9jm https://cve.radiocsirt.org/vuln/ghsa-84xm-3937-g9jm <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.</p> <p>Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.</p> https://cve.radiocsirt.org/vuln/ghsa-84xm-3937-g9jm gsd-2011-1578 https://cve.radiocsirt.org/vuln/gsd-2011-1578 gsd-2011-1578 https://cve.radiocsirt.org/vuln/gsd-2011-1578