CVE-2011-1765

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.htmlPatch
• http://secunia.com/advisories/44684
• http://www.securityfocus.com/bid/47722
• https://bugzilla.redhat.com/show_bug.cgi?id=702512Patch
• https://bugzilla.wikimedia.org/show_bug.cgi?id=28534Exploit
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.htmlPatch
• http://secunia.com/advisories/44684
• http://www.securityfocus.com/bid/47722
• https://bugzilla.redhat.com/show_bug.cgi?id=702512Patch
• https://bugzilla.wikimedia.org/show_bug.cgi?id=28534Exploit

Published

May 23, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1759Integer overflow in the sys_oabi_semtimedop function in arch…
• CVE-2011-1760utils/opcontrol in OProfile 0.9.6 and earlier might allow lo…
• CVE-2011-1761Multiple stack-based buffer overflows in the (1) abc_new_mac…
• CVE-2011-1762A flaw exists in Wordpress related to the 'wp-admin/press-th…6.5
• CVE-2011-1763The get_free_port function in Xen allows local authenticated…
• CVE-2011-1764Format string vulnerability in the dkim_exim_verify_finish f…
• CVE-2011-1766includes/User.php in MediaWiki before 1.16.5, when wgBlockDi…
• CVE-2011-1767net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip…
• CVE-2011-1768The tunnels implementation in the Linux kernel before 2.6.34…
• CVE-2011-1769SystemTap 1.4 and earlier, when unprivileged (aka stapusr) m…
• CVE-2011-1770Integer underflow in the dccp_parse_options function (net/dc…7.5
• CVE-2011-1771The cifs_close function in fs/cifs/file.c in the Linux kerne…7.8