Security Advisory
CVE-2011-1580
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.