Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-0782
HistoryFeb 14, 2008 - 9:00 p.m.

CVE-2008-0782

2008-02-1421:00:00
CWE-22
[email protected]
web.nvd.nist.gov
42
cve-2008-0782
moinmoin
directory traversal
vulnerability
remote attackers
arbitrary files
php code execution

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.083 Low

EPSS

Percentile

94.4%

JSON

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a … (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.

Affected configurations

NVD
Node
moinmoinmoinmoinMatch0.1
OR
moinmoinmoinmoinMatch0.2
OR
moinmoinmoinmoinMatch0.3
OR
moinmoinmoinmoinMatch0.7
OR
moinmoinmoinmoinMatch0.8
OR
moinmoinmoinmoinMatch0.9
OR
moinmoinmoinmoinMatch0.10
OR
moinmoinmoinmoinMatch0.11
OR
moinmoinmoinmoinMatch1.0
OR
moinmoinmoinmoinMatch1.1
OR
moinmoinmoinmoinMatch1.2
OR
moinmoinmoinmoinMatch1.2.1
OR
moinmoinmoinmoinMatch1.2.2
OR
moinmoinmoinmoinMatch1.5.0
OR
moinmoinmoinmoinMatch1.5.1
OR
moinmoinmoinmoinMatch1.5.2
OR
moinmoinmoinmoinMatch1.5.3
OR
moinmoinmoinmoinMatch1.5.3_rc1
OR
moinmoinmoinmoinMatch1.5.3_rc2
OR
moinmoinmoinmoinMatch1.5.4
OR
moinmoinmoinmoinMatch1.5.5
OR
moinmoinmoinmoinMatch1.5.5_rc1
OR
moinmoinmoinmoinMatch1.5.5a
OR
moinmoinmoinmoinMatch1.5.6
OR
moinmoinmoinmoinMatch1.5.7
OR
moinmoinmoinmoinMatch1.5.8

Related

nessus 5
nvd 1
cvelist 1
prion 1
github 1
debiancve 1
ubuntucve 1
gentoo 1
openvas 8
securityvulns 2
debian 1
ubuntu 1
osv 1
freebsd 1
nessus
nessus
MoinMoin MOIN_ID Cookie userform Action Traversal Arbitrary File Overwrite
2008-01-24 00:00:00
GLSA-200803-27 : MoinMoin: Multiple vulnerabilities
2008-03-19 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : moin vulnerabilities (USN-716-1)
2009-04-23 00:00:00
nvd
nvd
CVE-2008-0782
2008-02-14 21:00:00
cvelist
cvelist
CVE-2008-0782
2008-02-14 20:00:00
prion
prion
Directory traversal
2008-02-14 21:00:00
github
github
MoinMoin Directory traversal vulnerability
2022-05-01 23:33:03
debiancve
debiancve
CVE-2008-0782
2008-02-14 21:00:00
ubuntucve
ubuntucve
CVE-2008-0782
2008-02-14 00:00:00
gentoo
gentoo
MoinMoin: Multiple vulnerabilities
2008-03-18 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200803-27 (moinmoin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200803-27 (moinmoin)
2008-09-24 00:00:00
Ubuntu USN-716-1 (moin)
2009-02-02 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-10 00:00:00
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-10 00:00:00
debian
debian
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-09 14:39:08
ubuntu
ubuntu
MoinMoin vulnerabilities
2009-01-30 00:00:00
osv
osv
moin
2008-03-09 00:00:00
freebsd
freebsd
moinmoin -- multiple vulnerabilities
2007-02-08 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.083 Low

EPSS

Percentile

94.4%

JSON
Related for CVE-2008-0782
nessus5nvd1cvelist1prion1github1debiancve1ubuntucve1gentoo1openvas8securityvulns2debian1ubuntu1osv1freebsd1