Ubuntu Security Notice USN-716-1 - Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. Fernando Quintero discovered that MoinMoin did not properly sanitize its input when attaching files, resulting in cross-site scripting vulnerabilities. It was discovered that MoinMoin did not properly sanitize its input when processing user forms, editing pages, relaying error messages, or when attaching files.
3cf813802484b2e1dd4008c636dbd66d0098aaba73a35e91aab0e08180c8c49cGentoo Linux Security Advisory GLSA 200803-27 - Several vulnerabilities have been reported in MoinMoin Wiki Engine. Versions less than 1.6.1 are affected.
9453d7acf5c26cc64e7754aa0b33c5aae07f86205b95ff5c2a66d0c2d27d97aaDebian Security Advisory 1514-1 - Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki.
a2f5c6b016c84fc59c8f31f0debb4f0598e00c12e3a7970f8d359ccb4f790a83
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed