Skip to content
Noroxi

moinmoin records

18 published records for vendor moinmoin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    18 records
    • CVE-2004-1463
      41Plan

      Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.

      CriticalCVSS 10.0No exploitEPSS 2%

      moinmoin · moinmoinDec 31, 2004

    • CVE-2004-0708
      31Monitor

      MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has hi

      HighCVSS 7.5No exploitEPSS 2%

      moinmoin · moinmoinJul 27, 2004

    • CVE-2004-1462
      30Monitor

      Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (

      HighCVSS 7.5No exploitEPSS 2%

      moinmoin · moinmoinDec 31, 2004

    • CVE-2008-1937
      28Monitor

      The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage us

      MediumCVSS 6.8No exploitEPSS 2%

      moinmoin · moinmoinApr 25, 2008

    • CVE-2008-0782
      24Monitor

      Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 15%

      moinmoin · moinmoinFeb 14, 2008

    • CVE-2007-2423
      24Monitor

      Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via t

      MediumCVSS 5.8Proof of conceptEPSS 4%

      moinmoin · moinmoinMay 1, 2007

    • CVE-2008-1099
      21Monitor

      _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected

      MediumCVSS 5.0No exploitEPSS 2%

      moinmoin · moinmoinMar 5, 2008

    • CVE-2007-2637
      20Monitor

      MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via

      MediumCVSS 5.0No exploitEPSS 1%

      moinmoin · moinmoinMay 13, 2007

    • CVE-2007-0902
      20Monitor

      Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive informat

      MediumCVSS 5.0No exploitEPSS 1%

      moinmoin · moinmoinFeb 13, 2007

    • CVE-2009-0260
      19Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitr

      MediumCVSS 4.3Proof of conceptEPSS 5%

      moinmoin · moinmoinJan 23, 2009

    • CVE-2008-0781
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject a

      MediumCVSS 4.3No exploitEPSS 3%

      moinmoin · moinmoinFeb 14, 2008

    • CVE-2009-1482
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject a

      MediumCVSS 4.3No exploitEPSS 3%

      moinmo · moinmoinApr 29, 2009

    • CVE-2007-0857
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML v

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinFeb 8, 2007

    • CVE-2009-0312
      18Monitor

      Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinJan 27, 2009

    • CVE-2008-3381
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinJul 30, 2008

    • CVE-2008-1098
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or H

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinMar 5, 2008

    • CVE-2007-0901
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinFeb 13, 2007

    • CVE-2008-0780
      18Monitor

      Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary

      MediumCVSS 4.3No exploitEPSS 2%

      moinmoin · moinmoinFeb 14, 2008