CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 1CVE-2008-1098
https://notcve.org/view.php?id=CVE-2008-1098
05 Mar 2008 — Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails b... • http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2008-1099
https://notcve.org/view.php?id=CVE-2008-1099
05 Mar 2008 — _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. _macro_Getval en wikimacro.py de MoinMoin 1.5.8 y anteriores no hace cumplir correctamente ACLs, lo que permite a atacantes remotos leer páginas protegidas. • http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0CVE-2008-0780
https://notcve.org/view.php?id=CVE-2008-0780
14 Feb 2008 — Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action. Vulnerabilidad de secuencia de comandos en sitios cruzados en MoinMoin v1.5.x a la 1.5.8 y 1.6.x anterior a 1.6.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML a través de una acción de login. • http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 26EXPL: 0CVE-2008-0781
https://notcve.org/view.php?id=CVE-2008-0781
14 Feb 2008 — Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py de MoinMoin 1.5.8 y anteriores, permiten a atacantes remotos inyectar comandos web o HTML de su elección mediante (1) message, (2) pagename, y (3) target filenames. • http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 11%CPEs: 26EXPL: 1CVE-2008-0782 – MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass
https://notcve.org/view.php?id=CVE-2008-0782
14 Feb 2008 — Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. Una vulnerabilidad de salto de directorio en MoinMoin versión 1.5.8 y anteriores, permite a los atacantes remotos sobrescribir archivos arbitrarios por medio de un .. (punto punto) en el ID de usuario MOIN_ID de una cookie para una... • https://www.exploit-db.com/exploits/4957 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2007-2637
https://notcve.org/view.php?id=CVE-2007-2637
13 May 2007 — MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors. MoinMoin anterior a 20070507 no impone ACLs para calendarios e inclusiones(includes), lo cual permite a atacantes remotos leer ciertas páginas a través de vectores no especificados. • http://osvdb.org/36269 •
CVSS: 6.1EPSS: 5%CPEs: 1EXPL: 2CVE-2007-2423 – MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2007-2423
02 May 2007 — Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MoinMoin 1.5.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección ... • https://www.exploit-db.com/exploits/29915 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2007-0901
https://notcve.org/view.php?id=CVE-2007-0901
13 Feb 2007 — Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Info pages de MoinMoin 1.5.7 permiten a atacantes remotos inyectar secuencias de c... • http://osvdb.org/33172 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2007-0902
https://notcve.org/view.php?id=CVE-2007-0902
13 Feb 2007 — Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad no especificada en la característica "Mostrar información de depuración" de MoinMoin 1.5.7 permite a atacantes remotos obtener información sensible. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido de... • http://osvdb.org/33173 •
CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 0CVE-2007-0857
https://notcve.org/view.php?id=CVE-2007-0857
08 Feb 2007 — Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MoinMoin anterior a 1.5.7 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) la información de la página, o el nombre de página en una ... • http://moinmoin.wikiwikiweb.de/MoinMoinRelease1.5/CHANGES •