RCE in Mediawiki

CVE-2010-2789

PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via unspecified vectors.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.011 (62.0th percentile) — read the EPSS interpretation.

Affected products

Mediawiki — versions 1.16
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)