Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-0782
HistoryFeb 14, 2008 - 9:00 p.m.

CVE-2008-0782

2008-02-1421:00:00
CWE-22
[email protected]
web.nvd.nist.gov
41
cve-2008-0782
moinmoin
directory traversal
vulnerability
remote attackers
arbitrary files
php code execution

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.087 Low

EPSS

Percentile

94.5%

JSON

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a … (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.

Affected configurations

NVD
Node
moinmoinmoinmoinMatch0.1
OR
moinmoinmoinmoinMatch0.2
OR
moinmoinmoinmoinMatch0.3
OR
moinmoinmoinmoinMatch0.7
OR
moinmoinmoinmoinMatch0.8
OR
moinmoinmoinmoinMatch0.9
OR
moinmoinmoinmoinMatch0.10
OR
moinmoinmoinmoinMatch0.11
OR
moinmoinmoinmoinMatch1.0
OR
moinmoinmoinmoinMatch1.1
OR
moinmoinmoinmoinMatch1.2
OR
moinmoinmoinmoinMatch1.2.1
OR
moinmoinmoinmoinMatch1.2.2
OR
moinmoinmoinmoinMatch1.5.0
OR
moinmoinmoinmoinMatch1.5.1
OR
moinmoinmoinmoinMatch1.5.2
OR
moinmoinmoinmoinMatch1.5.3
OR
moinmoinmoinmoinMatch1.5.3_rc1
OR
moinmoinmoinmoinMatch1.5.3_rc2
OR
moinmoinmoinmoinMatch1.5.4
OR
moinmoinmoinmoinMatch1.5.5
OR
moinmoinmoinmoinMatch1.5.5_rc1
OR
moinmoinmoinmoinMatch1.5.5a
OR
moinmoinmoinmoinMatch1.5.6
OR
moinmoinmoinmoinMatch1.5.7
OR
moinmoinmoinmoinMatch1.5.8

Related

github 1
prion 1
nessus 5
nvd 1
cvelist 1
ubuntucve 1
debiancve 1
openvas 8
gentoo 1
securityvulns 2
osv 1
ubuntu 1
debian 1
freebsd 1
github
github
MoinMoin Directory traversal vulnerability
2022-05-01 23:33:03
prion
prion
Directory traversal
2008-02-14 21:00:00
nessus
nessus
MoinMoin MOIN_ID Cookie userform Action Traversal Arbitrary File Overwrite
2008-01-24 00:00:00
GLSA-200803-27 : MoinMoin: Multiple vulnerabilities
2008-03-19 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : moin vulnerabilities (USN-716-1)
2009-04-23 00:00:00
nvd
nvd
CVE-2008-0782
2008-02-14 21:00:00
cvelist
cvelist
CVE-2008-0782
2008-02-14 20:00:00
ubuntucve
ubuntucve
CVE-2008-0782
2008-02-14 00:00:00
debiancve
debiancve
CVE-2008-0782
2008-02-14 21:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200803-27 (moinmoin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200803-27 (moinmoin)
2008-09-24 00:00:00
Ubuntu USN-716-1 (moin)
2009-02-02 00:00:00
gentoo
gentoo
MoinMoin: Multiple vulnerabilities
2008-03-18 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-10 00:00:00
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-10 00:00:00
osv
osv
moin
2008-03-09 00:00:00
ubuntu
ubuntu
MoinMoin vulnerabilities
2009-01-30 00:00:00
debian
debian
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
2008-03-09 14:39:41
freebsd
freebsd
moinmoin -- multiple vulnerabilities
2007-02-08 00:00:00

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.087 Low

EPSS

Percentile

94.5%

JSON
Related for CVE-2008-0782
github1prion1nessus5nvd1cvelist1ubuntucve1debiancve1openvas8gentoo1securityvulns2osv1ubuntu1debian1freebsd1