CVE-2011-0537
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.9%
Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function.
Affected products
n/a · n/aReferences
http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.2.patch.gzhttp://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.htmlhttp://osvdb.org/70798http://osvdb.org/70799https://bugzilla.wikimedia.org/show_bug.cgi?id=27094http://www.openwall.com/lists/oss-security/2011/02/01/4http://www.openwall.com/lists/oss-security/2011/02/03/3http://www.vupen.com/english/advisories/2011/0273