Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-0537

Multiple directory traversal vulnerabilities in (1) languages/Language.php and (2) includes/StubObject.php in MediaWiki 1.8.0 and other versions before 1.16.2, when running on Windows and possibly Novell Netware, allow remote attackers to include and execute arbitrary local PHP files via vectors related to a crafted language file and the Language::factory function.

Published

2011-02-04T01:00:07.933

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediawiki mediawiki 1.8.0 Yes
Application mediawiki mediawiki 1.8.1 Yes
Application mediawiki mediawiki 1.8.2 Yes
Application mediawiki mediawiki 1.8.3 Yes
Application mediawiki mediawiki 1.8.4 Yes
Application mediawiki mediawiki 1.8.5 Yes
Application mediawiki mediawiki 1.9.0 Yes
Application mediawiki mediawiki 1.9.0 Yes
Application mediawiki mediawiki 1.9.1 Yes
Application mediawiki mediawiki 1.9.2 Yes
Application mediawiki mediawiki 1.9.3 Yes
Application mediawiki mediawiki 1.9.4 Yes
Application mediawiki mediawiki 1.9.5 Yes
Application mediawiki mediawiki 1.9.6 Yes
Application mediawiki mediawiki 1.10.0 Yes
Application mediawiki mediawiki 1.10.0 Yes
Application mediawiki mediawiki 1.10.0 Yes
Application mediawiki mediawiki 1.10.1 Yes
Application mediawiki mediawiki 1.10.2 Yes
Application mediawiki mediawiki 1.10.3 Yes
Application mediawiki mediawiki 1.10.4 Yes
Application mediawiki mediawiki 1.11 Yes
Application mediawiki mediawiki 1.11 Yes
Application mediawiki mediawiki 1.11.0 Yes
Application mediawiki mediawiki 1.11.0 Yes
Application mediawiki mediawiki 1.11.0rc1 Yes
Application mediawiki mediawiki 1.11.1 Yes
Application mediawiki mediawiki 1.11.2 Yes
Application mediawiki mediawiki 1.11_development Yes
Application mediawiki mediawiki 1.12.0 Yes
Application mediawiki mediawiki 1.12.0 Yes
Application mediawiki mediawiki 1.12.1 Yes
Application mediawiki mediawiki 1.12.2 Yes
Application mediawiki mediawiki 1.12.3 Yes
Application mediawiki mediawiki 1.12.4 Yes
Application mediawiki mediawiki 1.13.0 Yes
Application mediawiki mediawiki 1.13.0 Yes
Application mediawiki mediawiki 1.13.0 Yes
Application mediawiki mediawiki 1.13.1 Yes
Application mediawiki mediawiki 1.13.2 Yes
Application mediawiki mediawiki 1.13.3 Yes
Application mediawiki mediawiki 1.13.4 Yes
Application mediawiki mediawiki 1.14.0 Yes
Application mediawiki mediawiki 1.14.0 Yes
Application mediawiki mediawiki 1.14.1 Yes
Application mediawiki mediawiki 1.15.0 Yes
Application mediawiki mediawiki 1.15.0 Yes
Application mediawiki mediawiki 1.15.1 Yes
Application mediawiki mediawiki 1.15.2 Yes
Application mediawiki mediawiki 1.15.3 Yes
Application mediawiki mediawiki 1.16.0 Yes
Application mediawiki mediawiki 1.16.0 Yes
Application mediawiki mediawiki 1.16.0 Yes
Application mediawiki mediawiki 1.16.1 Yes
Operating System microsoft windows * No
References