mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
97 lines
3.4 KiB
JSON
97 lines
3.4 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2009-0737",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES"
|
|
},
|
|
{
|
|
"name": "DSA-1901",
|
|
"refsource": "DEBIAN",
|
|
"url": "http://www.debian.org/security/2009/dsa-1901"
|
|
},
|
|
{
|
|
"name": "33881",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/33881"
|
|
},
|
|
{
|
|
"name": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES"
|
|
},
|
|
{
|
|
"name": "[MediaWiki-announce] 20090207 MediaWiki releases: security update and new major branch",
|
|
"refsource": "MLIST",
|
|
"url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html"
|
|
},
|
|
{
|
|
"name": "33681",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/33681"
|
|
},
|
|
{
|
|
"name": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES"
|
|
},
|
|
{
|
|
"name": "ADV-2009-0368",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/0368"
|
|
}
|
|
]
|
|
}
|
|
} |