fkie_cve-2008-0781
Vulnerability from fkie_nvd
Published
2008-02-14 21:00
Modified
2024-11-21 00:42
Severity ?
Summary
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
References
cve@mitre.orghttp://hg.moinmo.in/moin/1.5/rev/db212dfc58ef
cve@mitre.orghttp://secunia.com/advisories/28987
cve@mitre.orghttp://secunia.com/advisories/29010
cve@mitre.orghttp://secunia.com/advisories/29262
cve@mitre.orghttp://secunia.com/advisories/29444
cve@mitre.orghttp://secunia.com/advisories/33755
cve@mitre.orghttp://www.debian.org/security/2008/dsa-1514
cve@mitre.orghttp://www.gentoo.org/security/en/glsa/glsa-200803-27.xml
cve@mitre.orghttp://www.securityfocus.com/bid/27904
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/0569/references
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=432748
cve@mitre.orghttps://usn.ubuntu.com/716-1/
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html
af854a3a-2127-422b-91ae-364da2661108http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28987
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29010
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29262
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29444
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33755
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2008/dsa-1514
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/27904
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/0569/references
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=432748
af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/716-1/
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html
Impacted products
Vendor Product Version
moinmoin moinmoin 0.1
moinmoin moinmoin 0.2
moinmoin moinmoin 0.3
moinmoin moinmoin 0.7
moinmoin moinmoin 0.8
moinmoin moinmoin 0.9
moinmoin moinmoin 0.10
moinmoin moinmoin 0.11
moinmoin moinmoin 1.0
moinmoin moinmoin 1.1
moinmoin moinmoin 1.2
moinmoin moinmoin 1.2.1
moinmoin moinmoin 1.2.2
moinmoin moinmoin 1.5.0
moinmoin moinmoin 1.5.1
moinmoin moinmoin 1.5.2
moinmoin moinmoin 1.5.3
moinmoin moinmoin 1.5.3_rc1
moinmoin moinmoin 1.5.3_rc2
moinmoin moinmoin 1.5.4
moinmoin moinmoin 1.5.5
moinmoin moinmoin 1.5.5_rc1
moinmoin moinmoin 1.5.5a
moinmoin moinmoin 1.5.6
moinmoin moinmoin 1.5.7
moinmoin moinmoin 1.5.8


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2D2866E-A684-4EB7-A127-5FEC934945E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BDC4AB6-39BF-4444-9CFE-B654A19814C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FD78CAE-9A9D-40AA-AD1F-C124A8315714",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8673FFE8-349E-4412-9913-1145DFA1EC46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "24271A6D-21D9-4E8D-997F-0EC132518FBC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3072B82-3D5C-46DF-8869-08FAAC5C70DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "93508FCF-7852-4CB9-AD91-AB0FCD61BE43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B83ACA6-5C3C-46E3-805C-EE1E759B7331",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F7EF155-C5E0-4473-B635-C551BF3F8EFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABFA7F26-835B-4454-91A2-1DBB80C53492",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C92D8510-CA34-4E6D-B432-997860C63B89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB2354B8-9A1A-4E75-92AC-F16CFDF91761",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B44C24B-013E-4769-A200-D59752E0A041",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB8DB90E-BEE5-447E-9F78-A96634343815",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "84317439-A287-4897-9608-65095860AB95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FB70477-B0F2-44D6-92A8-0F42F890CF99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "013FBB75-8B01-4249-9C6C-5E27964ED2D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "361C37DC-CB43-4E6A-A198-313A9D62CD18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "22F3D66C-3D24-41D0-9E4B-BB458DD5517D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A4C9F85-C5EF-4991-A005-5839951B9843",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "690F09A1-6195-404D-BDC3-5F02A4A201C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9C82F62-DFBB-4499-8C6D-27DA49A00F6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "57003BFE-8FB2-480A-AFA1-63817B608F9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0FD9248-1E4B-46DC-9F78-20787F56D50B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "23539FCA-FF83-46E5-A9E2-5051D975DC12",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py de MoinMoin 1.5.8 y anteriores, permiten a atacantes remotos inyectar comandos web o HTML de su elecci\u00f3n mediante (1) message, (2) pagename, y (3) target filenames."
    }
  ],
  "id": "CVE-2008-0781",
  "lastModified": "2024-11-21T00:42:53.727",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2008-02-14T21:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/28987"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29010"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29262"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29444"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/33755"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2008/dsa-1514"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/27904"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/0569/references"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432748"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/716-1/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/28987"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29262"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29444"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/33755"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2008/dsa-1514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/27904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/0569/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432748"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/716-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.