Skip to content
OpenAdvisories
Unscored DTSA-187-1 2 CVEs

moin - insufficient input sanitising

Published Jan 28, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 moin 1.7.1-3+lenny1

Vulnerabilities 2

  • Medium —
    CVE-2009-0260 Public exploit

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the d…

    moin PyPI
  • Medium —
    CVE-2009-0312

    MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

    Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.

    moin PyPI