CVE-2007-0857

CVE-2007-0857 covers multiple XSS vulnerabilities in MoinMoin prior to 1.5.7. The issues allow remote attackers to inject arbitrary script/HTML via (1) page info, or the page name in (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap actions. The vulnerability is documented across sources (OSV/G...

CVE-2007-0857

Removed by vendor...

CVE-2007-0857: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...

PT-2007-2300

Name of the Vulnerable Software and Affected Versions: MoinMoin versions prior to 1.5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via specific actions, including the page info, or the page name in AttachFile, RenamePage, or LocalSiteMap actions...

moinmoin -- multiple vulnerabilities

MoinMoin Security advisory XSS issue in login action XSS issue in AttachFile action XSS issue in RenamePage/DeletePage action XSS issue in gui editor...

CVE-2004-1462

CVE-2004-1462 concerns an unknown vulnerability in MoinMoin

CVE-2004-1463

CVE-2004-1463 concerns MoinMoin 1.2.2 and earlier, where an ACL handling issue in the PageEditor could allow a remote attacker to gain elevated privileges. The vulnerability is described as due to an undisclosed ACL flaw, with the impact described as elevated access to administrative functions (e...

CVE-2004-1462

Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as 1 revert and 2 delete...

CVE-2004-1463

Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists ACL, has unknown impact...

CVE-2004-1462

Removed by vendor...

CVE-2004-1463

Removed by vendor...

CVE-2004-1462: Undefined Security Weakness

Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as 1 revert and 2 delete...

CVE-2004-1463: Undefined Security Weakness

Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists ACL, has unknown impact...

CVE-2004-1462

Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as 1 revert and 2 delete...

CVE-2004-1463

Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists ACL, has unknown impact...

PT-2004-2375

Name of the Vulnerable Software and Affected Versions: MoinMoin versions 1.2.2 and earlier Description: The issue allows remote attackers to gain unauthorized access to administrator functions, including revert and delete. Recommendations: For MoinMoin versions 1.2.2 and earlier, at the moment,...

PT-2004-2376

Name of the Vulnerable Software and Affected Versions: MoinMoin versions 1.2.2 and earlier Description: The issue is related to Access Control Lists ACL in the PageEditor of MoinMoin, which could allow a remote attacker to gain elevated privileges. The impact of this issue is related to an...

GLSA-200407-09 : MoinMoin: Group ACL bypass

The remote host is affected by the vulnerability described in GLSA-200407-09 MoinMoin: Group ACL bypass MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact : I...

GLSA-200408-25 : MoinMoin: Group ACL bypass

The remote host is affected by the vulnerability described in GLSA-200408-25 MoinMoin: Group ACL bypass MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous...

FreeBSD : moinmoin -- ACL group bypass (115)

The following package needs to be updated: moinmoin %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg1ecf4ca1f7ad11d896c900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...