Unrated severityNVD Advisory· Published Oct 6, 2005· Updated Jun 16, 2026
CVE-2005-3165
CVE-2005-3165
Description
Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) tags or (2) Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:mediawiki:mediawiki:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta3:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta4:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta5:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.4_beta6:*:*:*:*:*:*:*
- (no CPE)range: <1.4.9
Patches
Vulnerability mechanics
References
3- secunia.com/advisories/16932nvdPatchVendor Advisory
- sourceforge.net/project/shownotes.phpnvdPatch
- lwn.net/Articles/153906/nvdVendor Advisory
News mentions
0No linked articles in our index yet.