virus logo Intrusion Prevention

MediaWiki.Language.Option.PHP.Code.Execution

description-logoDescription

This indicates a possible exploit of a remote code execution vulnerability in MediaWiki.
This flaw is due to an input validation error when processing, via an "eval()" call, a specially crafted user language option. It may be exploited by remote attackers to execute arbitrary commands with the privileges of the web server.

affected-products-logoAffected Products

MediaWiki MediaWiki 1.5.2
MediaWiki MediaWiki 1.5.1
MediaWiki MediaWiki 1.5 beta3
MediaWiki MediaWiki 1.5 beta2
MediaWiki MediaWiki 1.5 beta1
MediaWiki MediaWiki 1.5 alpha2
MediaWiki MediaWiki 1.5 alpha1
MediaWiki MediaWiki 1.5.0

Impact logoImpact

System compromise: execution of arbitrary PHP code.

recomended-action-logoRecommended Actions

Upgrade to MediaWiki version 1.5.3 :
http://www.mediawiki.org/wiki/Download

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 13354
Created Oct 18, 2006
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2005-4031
Exploit Prediction Score 15.13%
Default Action drop
Active
Affected OS Windows, Linux, BSD, Solaris, MacOS
Affected App PHP_app