moinmoin kayıtları
moinmoin üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2004-1463İstismar yok | Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.moinmoin · moinmoin | Kritik10,0 | — | %2,3 | 31 Ara 2004 |
31İzleyin | CVE-2004-0708İstismar yok | MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has himoinmoin · moinmoin | Yüksek7,5 | — | %1,8 | 27 Tem 2004 |
30İzleyin | CVE-2004-1462İstismar yok | Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (moinmoin · moinmoin | Yüksek7,5 | — | %1,6 | 31 Ara 2004 |
28İzleyin | CVE-2008-1937İstismar yok | The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage usmoinmoin · moinmoin · CWE-264 | Orta6,8 | — | %1,7 | 25 Nis 2008 |
24İzleyin | CVE-2008-0782Kavram kanıtı | Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a ..moinmoin · moinmoin · CWE-22 | Orta5,0 | — | %14,9 | 14 Şub 2008 |
24İzleyin | CVE-2007-2423Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via tmoinmoin · moinmoin | Orta5,8 | — | %3,6 | 1 May 2007 |
21İzleyin | CVE-2008-1099İstismar yok | _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected moinmoin · moinmoin · CWE-264 | Orta5,0 | — | %2,0 | 5 Mar 2008 |
20İzleyin | CVE-2007-2637İstismar yok | MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via moinmoin · moinmoin | Orta5,0 | — | %1,5 | 13 May 2007 |
20İzleyin | CVE-2007-0902İstismar yok | Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive informatmoinmoin · moinmoin | Orta5,0 | — | %1,4 | 13 Şub 2007 |
19İzleyin | CVE-2009-0260Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrmoinmoin · moinmoin · CWE-79 | Orta4,3 | — | %5,5 | 23 Oca 2009 |
18İzleyin | CVE-2008-0781İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject amoinmoin · moinmoin · CWE-79 | Orta4,3 | — | %2,6 | 14 Şub 2008 |
18İzleyin | CVE-2009-1482İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject amoinmo · moinmoin · CWE-79 | Orta4,3 | — | %2,5 | 29 Nis 2009 |
18İzleyin | CVE-2007-0857İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML vmoinmoin · moinmoin | Orta4,3 | — | %2,4 | 8 Şub 2007 |
18İzleyin | CVE-2009-0312İstismar yok | Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers tomoinmoin · moinmoin · CWE-79 | Orta4,3 | — | %2,4 | 27 Oca 2009 |
18İzleyin | CVE-2008-3381İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackersmoinmoin · moinmoin · CWE-79 | Orta4,3 | — | %2,1 | 30 Tem 2008 |
18İzleyin | CVE-2008-1098İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or Hmoinmoin · moinmoin · CWE-79 | Orta4,3 | — | %1,8 | 5 Mar 2008 |
18İzleyin | CVE-2007-0901İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script ormoinmoin · moinmoin | Orta4,3 | — | %1,8 | 13 Şub 2007 |
18İzleyin | CVE-2008-0780İstismar yok | Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary moinmoin · moinmoin · CWE-79 | Orta4,3 | — | %1,8 | 14 Şub 2008 |
- CVE-2004-146341Planlayın
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
KritikCVSS 10,0İstismar yokEPSS %2moinmoin · moinmoin31 Ara 2004
- CVE-2004-070831İzleyin
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has hi
YüksekCVSS 7,5İstismar yokEPSS %2moinmoin · moinmoin27 Tem 2004
- CVE-2004-146230İzleyin
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (
YüksekCVSS 7,5İstismar yokEPSS %2moinmoin · moinmoin31 Ara 2004
- CVE-2008-193728İzleyin
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage us
OrtaCVSS 6,8İstismar yokEPSS %2moinmoin · moinmoin25 Nis 2008
- CVE-2008-078224İzleyin
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %15moinmoin · moinmoin14 Şub 2008
- CVE-2007-242324İzleyin
Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via t
OrtaCVSS 5,8Kavram kanıtıEPSS %4moinmoin · moinmoin1 May 2007
- CVE-2008-109921İzleyin
_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected
OrtaCVSS 5,0İstismar yokEPSS %2moinmoin · moinmoin5 Mar 2008
- CVE-2007-263720İzleyin
MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via
OrtaCVSS 5,0İstismar yokEPSS %1moinmoin · moinmoin13 May 2007
- CVE-2007-090220İzleyin
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive informat
OrtaCVSS 5,0İstismar yokEPSS %1moinmoin · moinmoin13 Şub 2007
- CVE-2009-026019İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitr
OrtaCVSS 4,3Kavram kanıtıEPSS %5moinmoin · moinmoin23 Oca 2009
- CVE-2008-078118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject a
OrtaCVSS 4,3İstismar yokEPSS %3moinmoin · moinmoin14 Şub 2008
- CVE-2009-148218İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject a
OrtaCVSS 4,3İstismar yokEPSS %3moinmo · moinmoin29 Nis 2009
- CVE-2007-085718İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin8 Şub 2007
- CVE-2009-031218İzleyin
Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin27 Oca 2009
- CVE-2008-338118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin30 Tem 2008
- CVE-2008-109818İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or H
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin5 Mar 2008
- CVE-2007-090118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin13 Şub 2007
- CVE-2008-078018İzleyin
Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary
OrtaCVSS 4,3İstismar yokEPSS %2moinmoin · moinmoin14 Şub 2008