750 matches found
CVE-2007-0857
Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...
CVE-2007-0857
Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...
CVE-2007-0857
Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...
CVE-2007-0857
Removed by vendor...
CVE-2007-0857
Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...
CVE-2007-0857
CVE-2007-0857 covers multiple XSS vulnerabilities in MoinMoin prior to 1.5.7. The issues allow remote attackers to inject arbitrary script/HTML via (1) page info, or the page name in (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap actions. The vulnerability is documented across sources (OSV/G...
PT-2007-2300
Name of the Vulnerable Software and Affected Versions: MoinMoin versions prior to 1.5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via specific actions, including the page info, or the page name in AttachFile, RenamePage, or LocalSiteMap actions...
moinmoin -- multiple vulnerabilities
MoinMoin Security advisory XSS issue in login action XSS issue in AttachFile action XSS issue in RenamePage/DeletePage action XSS issue in gui editor...
CVE-2004-1462
CVE-2004-1462 concerns an unknown vulnerability in MoinMoin
CVE-2004-1463
CVE-2004-1463 concerns MoinMoin 1.2.2 and earlier, where an ACL handling issue in the PageEditor could allow a remote attacker to gain elevated privileges. The vulnerability is described as due to an undisclosed ACL flaw, with the impact described as elevated access to administrative functions (e...
CVE-2004-1463
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists ACL, has unknown impact...
CVE-2004-1462
Removed by vendor...
CVE-2004-1462
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as 1 revert and 2 delete...
CVE-2004-1463
Removed by vendor...
CVE-2004-1462
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as 1 revert and 2 delete...
CVE-2004-1463
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists ACL, has unknown impact...
GLSA-200408-25 : MoinMoin: Group ACL bypass
The remote host is affected by the vulnerability described in GLSA-200408-25 MoinMoin: Group ACL bypass MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous...
GLSA-200407-09 : MoinMoin: Group ACL bypass
The remote host is affected by the vulnerability described in GLSA-200407-09 MoinMoin: Group ACL bypass MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact : I...
FreeBSD : moinmoin -- ACL group bypass (115)
The following package needs to be updated: moinmoin %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg1ecf4ca1f7ad11d896c900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...