CVE-2005-3165

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) $tags\; or\; (2)\; Extension\; orsections\; that\; "bypass\; HTML\; style\; attribute\; restrictions"\; that\; are\; intended\; to\; protect\; against\; XSS\; vulnerabilities\; in\; Internet\; Explorer\; clients.$

Date published : 2005-10-06

http://sourceforge.net/project/shownotes.php?release_id=352777

http://secunia.com/advisories/16932