
CVE-2007-2637 – Debian Linux Security Advisory 1514-1
https://notcve.org/view.php?id=CVE-2007-2637
13 May 2007 — MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors. MoinMoin anterior a 20070507 no impone ACLs para calendarios e inclusiones(includes), lo cual permite a atacantes remotos leer ciertas páginas a través de vectores no especificados. Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. • http://osvdb.org/36269 •

CVE-2007-2423 – MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2007-2423
02 May 2007 — Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MoinMoin 1.5.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección ... • https://www.exploit-db.com/exploits/29915 •

CVE-2007-0901 – Ubuntu Security Notice 423-1
https://notcve.org/view.php?id=CVE-2007-0901
13 Feb 2007 — Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Info pages de MoinMoin 1.5.7 permiten a atacantes remotos inyectar secuencias de c... • http://osvdb.org/33172 •

CVE-2007-0902 – Ubuntu Security Notice 423-1
https://notcve.org/view.php?id=CVE-2007-0902
13 Feb 2007 — Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad no especificada en la característica "Mostrar información de depuración" de MoinMoin 1.5.7 permite a atacantes remotos obtener información sensible. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de... • http://osvdb.org/33173 •

CVE-2007-0857 – Ubuntu Security Notice 421-1
https://notcve.org/view.php?id=CVE-2007-0857
08 Feb 2007 — Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MoinMoin anterior a 1.5.7 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) la información de la página, o el nombre de página en una ... • http://moinmoin.wikiwikiweb.de/MoinMoinRelease1.5/CHANGES •

CVE-2004-1463
https://notcve.org/view.php?id=CVE-2004-1463
31 Dec 2004 — Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact. • http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801 •

CVE-2004-1462
https://notcve.org/view.php?id=CVE-2004-1462
31 Dec 2004 — Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete. • http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml •

CVE-2004-0708
https://notcve.org/view.php?id=CVE-2004-0708
21 Jul 2004 — MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges. MoinMoin 1.2.1 y anteiores permite a atacantes remotos ganar privilegios creando un usuario con el mismo nombre de un grupo existente con privilegios mayores. • http://secunia.com/advisories/11807 •