Browse CVEs

MEDIUM 6.8 CVE-2008-1937 The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, whic… Moinmoin Patch available Fix from $1,6002008-04-25 MEDIUM 5.0 CVE-2008-1099 _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. Moinmoin after 1.5.8 Fix from $1,6002008-03-05 MEDIUM 5.0 CVE-2008-0782EPSS 15% Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_I… Moinmoin No fix yet Fix from $1,6002008-02-14 MEDIUM 5.0 CVE-2007-2637 MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecifi… Moinmoin after 1.5.7 Fix from $1,6002007-05-13 MEDIUM 5.8 CVE-2007-2423 Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do par… Moinmoin No fix yet Fix from $1,6002007-05-02 MEDIUM 5.0 CVE-2007-0902 Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOT… Moinmoin No fix yet Fix from $1,6002007-02-13 HIGH 10.0 CVE-2004-1463 Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact. Moinmoin Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-1462 Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert… Moinmoin Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-0708 MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher priv… Moinmoin Patch available Fix from $1,9502004-07-27