← back
CVE-2008-0781

CVE-2008-0781

EPSS 2.5%
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://hg.moinmo.in/moin/1.5/rev/db212dfc58efhttps://bugzilla.redhat.com/show_bug.cgi?id=432748http://secunia.com/advisories/28987http://secunia.com/advisories/29010http://secunia.com/advisories/29262http://secunia.com/advisories/29444http://secunia.com/advisories/33755https://usn.ubuntu.com/716-1/https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.htmlhttp://www.debian.org/security/2008/dsa-1514http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml