CVE-2008-6548

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...

EUVD-2009-0009

Malware in sbrugna...

CVE-2010-2970

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...

CVE-2010-2969

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/LikePages.py, 2 action/chart.py, and 3 action/userprofile.py, a similar issue to...

PT-2008-2696

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 certain input processed by formatter/text gedit.py aka the gui editor formatter; 2 a page name, which triggers an injection in PageEditor.py when the...

PT-2004-2375

Name of the Vulnerable Software and Affected Versions: MoinMoin versions 1.2.2 and earlier Description: The issue allows remote attackers to gain unauthorized access to administrator functions, including revert and delete. Recommendations: For MoinMoin versions 1.2.2 and earlier, at the moment,...