Skip to content
OpenAdvisories

Archive

14 February 2008

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.

  • Medium —
    CVE-2008-0782 Public exploit EPSS 15%

    MoinMoin Directory traversal vulnerability

    Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the …

  • Medium —

    MoinMoin Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.