Unscored severity · published Feb 26, 2010
CVE-2010-0669
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors
–
CVSS
1.9%
EPSS
No
On KEV
Description
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Moinmoin · Moinmo
through 1.8.6; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0669
hg.moinmo.in
http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES
moinmo.in
http://moinmo.in/MoinMoinRelease1.8
Vendor Advisory
http://moinmo.in/SecurityFixes
Vendor Advisory
http://secunia.com/advisories/38444
secunia.com
http://secunia.com/advisories/38903
www.debian.org
http://www.debian.org/security/2010/dsa-2014
More from Moinmoin
9.8
CVE-2020-25074
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request
6.1
CVE-2017-5934
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via…
6.1
CVE-2016-9119
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified…
6.1
CVE-2016-7148
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting…
6.1
CVE-2016-7146
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)"…