Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-0537

Good to know:

icon

Date: February 3, 2011

Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function.

Language: PHP

Severity Score

Related Resources (10)

http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-February/000095.html
http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.2.patch.gz
https://nvd.nist.gov/vuln/detail/CVE-2011-0537
https://bugzilla.wikimedia.org/show_bug.cgi?id=27094
http://www.openwall.com/lists/oss-security/2011/02/03/3
http://osvdb.org/70798
http://osvdb.org/70799
http://www.openwall.com/lists/oss-security/2011/02/01/4
http://www.vupen.com/english/advisories/2011/0273
https://www.mend.io/vulnerability-database/CVE-2011-0537

Severity Score

Weakness Type (CWE)

Path Traversal

CWE-22

Top Fix

icon

Upgrade Version

Upgrade to version 1.16.3

Learn More

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH
Additional information:

Do you need more information?

Contact Us