Launchpad CVE tracker

CVE 2011-0003

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Related bugs and status

CVE-2011-0003 (Candidate) is related to these bugs:

Bug #697451: CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1

		In	Importance	Status
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu)	Medium	Invalid
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	MediaWiki	High	Fix Released
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Fedora)	Medium	Fix Released
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Debian)	Undecided	Fix Released
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu Karmic)	Medium	Invalid
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu Lucid)	Medium	Invalid
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu Natty)	Medium	Invalid
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu Maverick)	Medium	Invalid
697451	CVE-2011-0003: clickjacking vulnerability in mediawiki <1.16.1	mediawiki (Ubuntu Hardy)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2011-0003

References