Published: 05/03/2008 Updated: 03/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails because of a duplicate name. NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moinmoin moinmoin

Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the conte ...

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling CVE-2007-2637 Access control lists for calendars and includes wer ...

CWE-79 http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499 http://moinmo.in/SecurityFixes http://www.debian.org/security/2008/dsa-1514 http://www.securityfocus.com/bid/28173 http://secunia.com/advisories/29262 http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml http://secunia.com/advisories/29444 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html http://secunia.com/advisories/30031 http://secunia.com/advisories/33755 https://exchange.xforce.ibmcloud.com/vulnerabilities/41037 https://usn.ubuntu.com/716-1/https://usn.ubuntu.com/716-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1098

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect