Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/01 11:45 p.m.20 views

MoinMoin vulnerable to privilege escalation

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

6.8CVSS7.5AI score0.01EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2022/05/01 11:45 p.m.20 views

GHSA-RQXP-6926-HPHR MoinMoin vulnerable to privilege escalation

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

8.7CVSS6.3AI score0.01EPSS
Exploits1References10
Gentoo Linux
Gentoo Linux
added 2008/05/11 12:0 a.m.23 views

MoinMoin: Privilege escalation

Background MoinMoin is an advanced and extensible Wiki Engine. Description It has been reported that the user form processing in the file userform.py does not properly manage users when using Access Control Lists or a non-empty superusers list. Impact A remote attacker could exploit this...

6.8CVSS6.5AI score0.01EPSS
Exploits1
Prion
Prion
added 2008/04/25 6:5 a.m.14 views

Code injection

The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...

6.8CVSS6.9AI score0.01EPSS
Exploits1References8Affected Software1
CVE
CVE
added 2008/04/24 6:0 p.m.51 views

CVE-2008-1937

CVE-2008-1937 affects MoinMoin: the userform.py processing in versions prior to 1.6.3 fails to properly manage users when ACLs or a non-empty superuser list are used, enabling remote privilege escalation. The issue is tied to the user management logic in the form handling code, not a general prod...

6.8CVSS6.5AI score0.01EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2008/04/24 6:0 p.m.18 views

CVE-2008-1937

Removed by vendor...

6.8CVSS6.7AI score0.01EPSS
Exploits1
Rows per page
Query Builder