[SECURITY] Fedora 17 Update: moin-1.9.6-1.fc17

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 16 Update: moin-1.9.6-1.fc16

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

Fedora Update for moin FEDORA-2013-0600

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2013-0600 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

MoinMoin twikidraw.py Traversal File Upload Arbitrary File Overwrite

The MoinMoin install hosted on the remote web server fails to properly sanitize user-supplied input in the twikidraw action/twikidraw.py action. A remote, unauthenticated attacker could utilize a specially crafted request using directory traversal style characters to upload a file containing...

Fedora 18 : moin-1.9.6-1.fc18 (2013-0600)

Update to 1.9.6. Fixes CVE-2012-6495 For full changes, see : http://hg.moinmo.in/moin/1.9/raw-file/1.9.6/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

[SECURITY] Fedora 18 Update: moin-1.9.6-1.fc18

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

FreeBSD : moinmoin -- Multiple vulnerabilities (a264b1b0-5726-11e2-9483-14dae938ec40)

MoinMoin developers report the following vulnerabilities as fixed in version 1.9.6 : - remote code execution vulnerability in twikidraw/anywikidraw action, - path traversal vulnerability in AttachFile action, - XSS issue, escape page name in rss link. CVE entries at MITRE furher clarify : Multipl...

MoinMoin action/twikidraw.py和action/anywikidraw.py任意代码执行漏洞

BUGTRAQ ID: 57082 CVECAN ID: CVE-2012-6081 MoinMoin是一个基于Python环境的wiki引擎程序，支持包括中文在内的多语种特性。 MoinMoin 1.9.6之前版本中 twikidraw action/twikidraw.py 、anywikidraw action/anywikidraw.py 脚本存在多个文件上传漏洞，可允许具有写权限的、经过身份验证的远程攻击者通过上传带有可执行扩展名的文件，然后直接请求该文件，执行任意代码。 0 MoinMoin Wiki Engine 1.9.3 厂商补丁： MoinMoin --------...

CVE-2012-6080

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

CVE-2012-6495

Multiple directory traversal vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged wi...

CVE-2012-6081

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

PYSEC-2013-6

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

CVE-2012-6495

Multiple directory traversal vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged wi...

Cross site scripting

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

PYSEC-2013-5

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

Directory traversal

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

Directory traversal

Multiple directory traversal vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged wi...