PT-2011-1383

CVE-2010-2789

·

Published

2011-04-27

·

Updated

2011-07-19

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions MediaWiki version 1.16 beta
Description A remote file inclusion issue in MediaWikiParserTest.php allows remote attackers to execute arbitrary PHP code when register globals is enabled.
Recommendations For MediaWiki version 1.16 beta, consider disabling the register globals setting as a temporary workaround until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2010-2789
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com