Unrated severityNVD Advisory· Published Jul 12, 2005· Updated Apr 16, 2026
CVE-2005-2215
CVE-2005-2215
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.5_alpha1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.5_alpha2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.5_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.5_beta2:*:*:*:*:*:*:*
- (no CPE)range: <1.4.6, <1.5beta3
Patches
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
4- secunia.com/advisories/15950nvdPatchVendor Advisory
- sourceforge.net/project/shownotes.phpnvdPatch
- www.securityfocus.com/bid/14181nvdPatch
- www.novell.com/linux/security/advisories/2005_19_sr.htmlnvd
News mentions
0No linked articles in our index yet.