Published: 10/11/2016 Updated: 01/02/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

MoinMoin 1.9.8 allows remote malicious users to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moinmo moinmoin 1.9.8

Several security issues were fixed in MoinMoin ...

Several cross-site scripting vulnerabilities were discovered in moin, a Python clone of WikiWiki A remote attacker can conduct cross-site scripting attacks via the GUI editor's attachment dialogue (CVE-2016-7146), the AttachFile view (CVE-2016-7148) and the GUI editor's link dialogue (CVE-2016-9119) For the stable distribution (jessie), these pro ...

Debian Bug report logs - #844341 moin: CVE-2016-7148: XSS in AttachFile view (multifile related) Package: src:moin; Maintainer for src:moin is Steve McIntyre <93sam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 14 Nov 2016 15:51:01 UTC Severity: serious Tags: fixed-upstream, patch, sec ...

Debian Bug report logs - #844340 moin: CVE-2016-7146: XSS in GUI editor's attachment dialogue Package: src:moin; Maintainer for src:moin is Steve McIntyre <93sam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 14 Nov 2016 15:48:06 UTC Severity: serious Tags: fixed-upstream, patch, securi ...

Debian Bug report logs - #844338 moin: CVE-2016-9119: XSS in GUI editor's link dialogue Package: src:moin; Maintainer for src:moin is Steve McIntyre <93sam@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 14 Nov 2016 15:48:02 UTC Severity: serious Tags: fixed-upstream, patch, security, up ...

MoinMoin version 198 suffers from cross site scripting vulnerabilities ...

CWE-79 https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html http://www.securityfocus.com/bid/94259 http://www.ubuntu.com/usn/USN-3137-1 http://www.debian.org/security/2016/dsa-3715 https://usn.ubuntu.com/3137-1/https://nvd.nist.gov

CVE-2016-7148

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect