Skip to content
OpenAdvisories
Unscored DSA-1514-1 7 CVEs

moin

Published Mar 9, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 moin 1.5.3-1.2etch1

Vulnerabilities 7

  • Unscored —
    CVE-2007-2423 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web…

  • Medium —
    CVE-2007-2637

    MoinMoin Improper ACL handling for calendars and includes

    MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

    moin PyPI
  • Medium —
    CVE-2008-0780

    MoinMoin Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.

    moin PyPI
  • Medium —
    CVE-2008-0781

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.

    moin PyPI
  • Medium —
    CVE-2008-0782 Public exploit EPSS 15%

    MoinMoin Directory traversal vulnerability

    Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the …

    moin PyPI
  • Medium —
    CVE-2008-1098

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which t…

    moin PyPI
  • Medium —
    CVE-2008-1099

    MoinMoin Improper Access Control

    _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

    moin PyPI