Skip to content
OpenAdvisories
Medium DSA-2593-1 4 CVEs

moin - several

Published Dec 29, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 moin 1.9.3-1+squeeze4

Vulnerabilities 4

  • Medium 6.3
    CVE-2012-6081 Public exploit EPSS 35%

    MoinMoin Multiple unrestricted file upload vulnerabilities

    Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uplo…

    moin PyPI
  • Medium 6.1
    CVE-2012-6082

    MoinMoin Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.

    moin PyPI
  • Medium 5.3
    CVE-2012-6080

    MoinMoin Directory Traversal vulnerability

    Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.

    moin PyPI
  • Medium 4.3
    CVE-2012-6495 Public exploit EPSS 19%

    MoinMoin Multiple vulnerable to directory traversal

    Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspe…

    moin PyPI