Published: 14/02/2008 Updated: 03/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moinmoin moinmoin 0.8
moinmoin moinmoin 0.9
moinmoin moinmoin 1.5.2
moinmoin moinmoin 0.3
moinmoin moinmoin 0.7
moinmoin moinmoin 1.5.0
moinmoin moinmoin 1.5.1
moinmoin moinmoin 1.5.5_rc1
moinmoin moinmoin 1.5.5a
moinmoin moinmoin 0.11
moinmoin moinmoin 0.2
moinmoin moinmoin 1.2.1
moinmoin moinmoin 1.2.2
moinmoin moinmoin 1.5.3
moinmoin moinmoin 1.5.6
moinmoin moinmoin 1.5.7
moinmoin moinmoin 1.5.4
moinmoin moinmoin 1.5.5
moinmoin moinmoin 0.1
moinmoin moinmoin 0.10
moinmoin moinmoin 1.0
moinmoin moinmoin 1.1
moinmoin moinmoin 1.2
moinmoin moinmoin 1.5.3_rc1
moinmoin moinmoin 1.5.3_rc2
moinmoin moinmoin 1.5.8

Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the conte ...

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling CVE-2007-2637 Access control lists for calendars and includes wer ...

CWE-79 http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef https://bugzilla.redhat.com/show_bug.cgi?id=432748 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html http://www.securityfocus.com/bid/27904 http://secunia.com/advisories/29010 http://secunia.com/advisories/28987 http://www.debian.org/security/2008/dsa-1514 http://secunia.com/advisories/29262 http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml http://secunia.com/advisories/29444 http://secunia.com/advisories/33755 http://www.vupen.com/english/advisories/2008/0569/references https://usn.ubuntu.com/716-1/https://usn.ubuntu.com/716-1/https://nvd.nist.gov

CVE-2008-0781

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect