Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-0460

medium · 4.3

Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3
CVSS
14.6%
EPSS (exploit prob.)
96th
EPSS percentile
2008-01-25
Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

VendorProductAffected versions
mediawikimediawiki1.7.0
mediawikimediawiki1.8.0
mediawikimediawiki1.8.1
mediawikimediawiki1.8.2
mediawikimediawiki1.8.3
mediawikimediawiki1.8.4
mediawikimediawiki1.9.0
mediawikimediawiki1.9.1
mediawikimediawiki1.9.2
mediawikimediawiki1.9.3
mediawikimediawiki1.9.4
mediawikimediawiki1.10.0
mediawikimediawiki1.10.1
mediawikimediawiki1.10.2
mediawikimediawiki1.11
mediawikimediawiki1.11.0rc1
mediawikimediawiki_botquery_extall versions
microsoftinternet_explorerall versions
mediawikimediawiki1.7.0
mediawikimediawiki_botquery_extall versions
microsoftinternet_explorerall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-0460