Published: 14/02/2008 Updated: 03/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in MoinMoin 1.5.8 and previous versions allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moinmoin moinmoin 0.11
moinmoin moinmoin 0.2
moinmoin moinmoin 1.2.1
moinmoin moinmoin 1.2.2
moinmoin moinmoin 0.3
moinmoin moinmoin 0.7
moinmoin moinmoin 0.8
moinmoin moinmoin 1.5.0
moinmoin moinmoin 1.5.1
moinmoin moinmoin 1.5.5_rc1
moinmoin moinmoin 1.5.5a
moinmoin moinmoin 1.5.4
moinmoin moinmoin 1.5.5
moinmoin moinmoin 0.1
moinmoin moinmoin 0.10
moinmoin moinmoin 1.1
moinmoin moinmoin 1.2
moinmoin moinmoin 1.5.3_rc1
moinmoin moinmoin 1.5.3_rc2
moinmoin moinmoin 1.5.8
moinmoin moinmoin 0.9
moinmoin moinmoin 1.0
moinmoin moinmoin 1.5.2
moinmoin moinmoin 1.5.3
moinmoin moinmoin 1.5.6
moinmoin moinmoin 1.5.7

Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the conte ...

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling CVE-2007-2637 Access control lists for calendars and includes wer ...

#!/usr/bin/python # #Exploit for the MOIND_ID cookie Bug # MoinMoin 15x # #Find your patch in : hgmoinmoin/moin/15/rev/e69a16b6e630 # #Bug and exploit coded by just a nonroot and colombian user # #Enero 21 de 2008 # #Greets: el directorio and all the SL community # # import urllib2,sys print "MoinMoin host: ie: 127001:8000/" ...

CWE-22 http://www.attrition.org/pipermail/vim/2008-January/001890.html http://www.securityfocus.com/bid/27404 http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 http://secunia.com/advisories/29010 http://www.debian.org/security/2008/dsa-1514 http://secunia.com/advisories/29262 http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml http://secunia.com/advisories/29444 http://secunia.com/advisories/33755 http://www.vupen.com/english/advisories/2008/0569/references https://exchange.xforce.ibmcloud.com/vulnerabilities/39837 https://www.exploit-db.com/exploits/4957 https://usn.ubuntu.com/716-1/https://usn.ubuntu.com/716-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/4957/

CVE-2008-0782

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect