Published: 14/02/2008 Updated: 03/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x up to and including 1.5.8 and 1.6.x prior to 1.6.1 allows remote malicious users to inject arbitrary web script or HTML via the login action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moinmoin moinmoin 1.5.3_rc2
moinmoin moinmoin 1.5.4
moinmoin moinmoin 1.6.0
moinmoin moinmoin 1.5.3
moinmoin moinmoin 1.5.3_rc1
moinmoin moinmoin 1.5.7
moinmoin moinmoin 1.5.8
moinmoin moinmoin 1.5.0
moinmoin moinmoin 1.5.1
moinmoin moinmoin 1.5.2
moinmoin moinmoin 1.5.5a
moinmoin moinmoin 1.5.6
moinmoin moinmoin 1.5.5
moinmoin moinmoin 1.5.5_rc1

Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the conte ...

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling CVE-2007-2637 Access control lists for calendars and includes wer ...

CWE-79 http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d https://bugzilla.redhat.com/show_bug.cgi?id=432747 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html http://www.securityfocus.com/bid/27904 http://secunia.com/advisories/29010 http://secunia.com/advisories/28987 http://www.debian.org/security/2008/dsa-1514 http://secunia.com/advisories/29262 http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml http://secunia.com/advisories/29444 http://secunia.com/advisories/33755 http://www.vupen.com/english/advisories/2008/0569/references https://usn.ubuntu.com/716-1/https://usn.ubuntu.com/716-1/https://nvd.nist.gov

CVE-2008-0780

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect