CVE ID:	CVE-2010-2788
Description:	Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
Test IDs:	1.3.6.1.4.1.25623.1.0.100732   1.3.6.1.4.1.25623.1.0.69511   1.3.6.1.4.1.25623.1.0.69542   1.3.6.1.4.1.25623.1.0.69541   1.3.6.1.4.1.25623.1.0.801877   1.3.6.1.4.1.25623.1.0.69529
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2788 42024 http://www.securityfocus.com/bid/42024 FEDORA-2011-5495 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html FEDORA-2011-5807 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html FEDORA-2011-5812 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html FEDORA-2011-5848 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html [mediawiki-announce] 20100728 MediaWiki security release: 1.16.0 and 1.15.5 http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html [oss-security] 20100729 Re: CVE request: mediawiki http://openwall.com/lists/oss-security/2010/07/29/4 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69952 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69952 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69984 http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=69984 https://bugzilla.redhat.com/show_bug.cgi?id=620225 https://bugzilla.redhat.com/show_bug.cgi?id=620225 https://bugzilla.redhat.com/show_bug.cgi?id=620226 https://bugzilla.redhat.com/show_bug.cgi?id=620226