8 matches found
CVE-2007-2423
Cross-site scripting XSS vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-2423
Cross-site scripting XSS vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-2423
CVE-2007-2423 refers to a cross-site scripting (XSS) vulnerability in MoinMoin 1.5.7, exploitable via the do parameter in an AttachFile action on index.php. The CVSS v2 base score is 5.8 (PARTIAL impacts to confidentiality and integrity, no impact to availability; network attack vector, no authen...
CVE-2007-0901
Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...
Design/Logic Flaw
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0901
Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-0901
CVE-2007-0901: Multiple XSS vulnerabilities in MoinMoin 1.5.7 Info pages allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters. The description notes the issue in MoinMoin 1.5.7; root cause details and a formal fix/mitigation are not provid...