Medium
CVE-2009-0312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41
Reset filters
Medium
CVE-2009-0260
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2007-2637
MoinMoin Improper ACL handling for calendars and includes
Medium
CVE-2007-0902
MoinMoin Insertion of Sensitive Information into Log File
Medium
CVE-2007-0901
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
Medium
CVE-2008-1098
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2008-0781
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2008-1099
MoinMoin Improper Access Control
Medium
CVE-2007-0857
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2008-0782
MoinMoin Directory traversal vulnerability
Medium
CVE-2008-0780
MoinMoin Cross-site scripting (XSS) vulnerability
High
CVE-2004-1463
MoinMoin Improper Privilege Management
High
CVE-2004-1462
MoinMoin Improper Access Control
High
CVE-2004-0708
MoinMoin allows administrative access
Medium
CVE-2008-6548
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
Medium
CVE-2010-2487
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted
Medium
CVE-2010-2969
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to
Medium
CVE-2010-2970
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py
Medium
CVE-2012-6080
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary fil
Medium
CVE-2012-6495
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users wi
Medium
CVE-2012-6082
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.
Medium
CVE-2012-4404
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users w
Medium
CVE-2012-6081
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated use
Medium
CVE-2016-7148
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.