CVE-2005-3165

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.

• http://lwn.net/Articles/153906/Vendor Advisory
• http://secunia.com/advisories/16932Patch, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=352777Patch
• http://lwn.net/Articles/153906/Vendor Advisory
• http://secunia.com/advisories/16932Patch, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=352777Patch

Published

Oct 6, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3159SQL injection vulnerability in messages.php in PHP-Fusion al…
• CVE-2005-3160Multiple SQL injection vulnerabilities in photogallery.php i…
• CVE-2005-3161Multiple SQL injection vulnerabilities in PHP-Fusion before …
• CVE-2005-3162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3163Unspecified vulnerability in Polipo 0.9.8 and earlier allows…
• CVE-2005-3164The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4…
• CVE-2005-3166Unspecified vulnerability in "edit submission handling" for …
• CVE-2005-3167Incomplete blacklist vulnerability in MediaWiki before 1.4.1…
• CVE-2005-3168The SECEDIT command on Microsoft Windows 2000 before Update …
• CVE-2005-3169Microsoft Windows 2000 before Update Rollup 1 for SP4, when …
• CVE-2005-3170The LDAP client on Microsoft Windows 2000 before Update Roll…5
• CVE-2005-3171Microsoft Windows 2000 before Update Rollup 1 for SP4 record…