MO
Product
Moinmoin
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 5Low 0
Watch
Add Moinmoin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25074 | 9.8 | Nov 10 | The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request Affected: through 1.9.10 |
| CVE-2017-5934 | 6.1 | Oct 15 | Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via… Affected: before 1.9.10 |
| CVE-2016-9119 | 6.1 | Jan 30 | Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: through 1.9.7 |
| CVE-2016-7148 | 6.1 | Nov 10 | MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting… Affected: 1.9.8 |
| CVE-2016-7146 | 6.1 | Nov 10 | MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)"… Affected: 1.9.8 |
| CVE-2020-15275 | 5.4 | Nov 11 | MoinMoin is a wiki engine Affected: before 1.9.11 |
| CVE-2012-6495 | – | Jan 3 | Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote… Affected: through 1.9.5; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2012-6082 | – | Jan 3 | Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page… Affected: 1.9.5 |
| CVE-2012-6081 | – | Jan 3 | Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow… Affected: through 1.9.5; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2012-6080 | – | Jan 3 | Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to… Affected: 1.9.3; 1.9.4; 1.9.5 |
| CVE-2012-4404 | – | Sep 10 | security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote… Affected: 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4 |
| CVE-2011-1058 | – | Feb 22 | Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is… Affected: through 1.9.2; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2010-2969 | – | Aug 5 | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via… Affected: through 1.7.3; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2010-2970 | – | Aug 5 | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to… Affected: 1.9.0; 1.9.1; 1.9.2 |
| CVE-2010-2487 | – | Aug 5 | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script… Affected: through 1.7.3; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2010-0828 | – | Apr 5 | Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web… Affected: 1.8.7; 1.9.2 |
| CVE-2010-1238 | – | Apr 5 | MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values Affected: 1.7.1 |
| CVE-2009-4762 | – | Mar 29 | MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers… Affected: 1.7.0; 1.7.1; 1.7.2; 1.8.0; 1.8.1; 1.8.2 |
| CVE-2010-0717 | – | Feb 26 | The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors Affected: through 1.8.6; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2010-0669 | – | Feb 26 | MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors Affected: through 1.8.6; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2010-0668 | – | Feb 26 | Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2010-0667 | – | Feb 26 | MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote… Affected: 1.9.0 |
| CVE-2009-1482 | – | Apr 29 | Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an… Affected: 1.6.1 |
| CVE-2008-6603 | – | Apr 3 | MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a… Affected: 1.6.2; 1.7.0 |
| CVE-2008-6549 | – | Mar 30 | The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote… Affected: 1.6.1 |
| CVE-2008-6548 | – | Mar 30 | The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors Affected: 1.6.1 |
Showing 26