Vulnerabilities > Moinmo > Moinmoin > 1.7.0

DATE CVE VULNERABILITY TITLE RISK
2010-02-26 CVE-2010-0717 Configuration vulnerability in Moinmo Moinmoin
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
network
low complexity
moinmo CWE-16
7.5
2010-02-26 CVE-2010-0669 Security vulnerability in MoinMoin
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
network
low complexity
moinmo
7.5
2010-02-26 CVE-2010-0668 Security vulnerability in MoinMoin
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.
network
moinmo
6.8
2009-04-03 CVE-2008-6603 Permissions, Privileges, and Access Controls vulnerability in Moinmo Moinmoin 1.6.2/1.7.0
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937.
network
moinmo CWE-264
6.8