CVSS: 6.8EPSS: 1%CPEs: 46EXPL: 0CVE-2010-0668 – Debian Linux Security Advisory 2014-1
https://notcve.org/view.php?id=CVE-2010-0668
26 Feb 2010 — Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured. Vulnerabilidad no especificada en MoinMoin v1.5.x hasta v1.7.x, v1.8.x anteriores a v1.8.7, y v1.9.x anteriores a v1.9.2 tiene un impacto y cvector de ataque desconocido, relativo a configuraciones que tienen una lista no vacía ... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975 •
CVSS: 7.5EPSS: 1%CPEs: 46EXPL: 0CVE-2010-0669 – Debian Linux Security Advisory 2014-1
https://notcve.org/view.php?id=CVE-2010-0669
26 Feb 2010 — MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. MoinMoin anteriores a v1.8.7 y 1.9.x anteriores a v1.9.2 no sanea de forma adecuada los perfiles de usuario, lo que tiene un impacto y efectos desconocidos. It was discovered that several wiki actions and preference settings in MoinMoin were not protected from cross-site request forgery (CSRF). If an authenticated user were tricked into visiting a malicious website while lo... • http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES •
CVSS: 6.1EPSS: 1%CPEs: 40EXPL: 1CVE-2009-1482 – Ubuntu Security Notice 774-1
https://notcve.org/view.php?id=CVE-2009-1482
29 Apr 2009 — Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file errors in the upload_form function, different vectors than CVE-2009-0260. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin v1.8.2 y anteriores permiten a atacantes remotos ... • http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 3%CPEs: 36EXPL: 2CVE-2009-0260 – MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2009-0260
23 Jan 2009 — Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable). Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin antes de v1.8.1, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de s... • https://www.exploit-db.com/exploits/32746 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2008-1099 – Gentoo Linux Security Advisory 200803-27
https://notcve.org/view.php?id=CVE-2008-1099
05 Mar 2008 — _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. _macro_Getval en wikimacro.py de MoinMoin 1.5.8 y anteriores no hace cumplir correctamente ACLs, lo que permite a atacantes remotos leer páginas protegidas. Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities. With cross-site scripting vulnerabilitie... • http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2008-1098 – Gentoo Linux Security Advisory 200803-27
https://notcve.org/view.php?id=CVE-2008-1098
05 Mar 2008 — Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails b... • http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 11%CPEs: 26EXPL: 1CVE-2008-0782 – MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass
https://notcve.org/view.php?id=CVE-2008-0782
14 Feb 2008 — Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. Una vulnerabilidad de salto de directorio en MoinMoin versión 1.5.8 y anteriores, permite a los atacantes remotos sobrescribir archivos arbitrarios por medio de un .. (punto punto) en el ID de usuario MOIN_ID de una cookie para una... • https://www.exploit-db.com/exploits/4957 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 26EXPL: 0CVE-2008-0781 – Gentoo Linux Security Advisory 200803-27
https://notcve.org/view.php?id=CVE-2008-0781
14 Feb 2008 — Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py de MoinMoin 1.5.8 y anteriores, permiten a atacantes remotos inyectar comandos web o HTML de su elección mediante (1) message, (2) pagename, y (3) target filenames. Fernando Quintero di... • http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0CVE-2008-0780 – Gentoo Linux Security Advisory 200803-27
https://notcve.org/view.php?id=CVE-2008-0780
14 Feb 2008 — Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action. Vulnerabilidad de secuencia de comandos en sitios cruzados en MoinMoin v1.5.x a la 1.5.8 y 1.6.x anterior a 1.6.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través de una acción de login. Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, r... • http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2007-2637 – Debian Linux Security Advisory 1514-1
https://notcve.org/view.php?id=CVE-2007-2637
13 May 2007 — MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors. MoinMoin anterior a 20070507 no impone ACLs para calendarios e inclusiones(includes), lo cual permite a atacantes remotos leer ciertas páginas a través de vectores no especificados. Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. • http://osvdb.org/36269 •