Skip to content
OpenAdvisories

Archive

26 February 2010

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5

    MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

    MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

  • High —

    MoinMoin has improper default configuration

    The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.

  • High —

    MoinMoin improper sanitizes user profiles

    MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.