CVE-2008-0460

https://notcve.org/view.php?id=CVE-2008-0460

25 Jan 2008 — Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el fichero api.php de (1)MediaWiki 1.11 hasta 1.11.0rc1, 1.10 hasta 1.10.2, 1.9 hasta 1.9.4, y 1.8; y de (2) la extensi... • http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-January/000068.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •