Vulnerabilities > Moinmo > Moinmoin > 1.9.1

DATE CVE VULNERABILITY TITLE RISK
2010-08-05 CVE-2010-2487 Cross-Site Scripting vulnerability in Moinmo Moinmoin
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py.
network
moinmo CWE-79
4.3
2010-02-26 CVE-2010-0669 Security vulnerability in MoinMoin
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
network
low complexity
moinmo
7.5
2010-02-26 CVE-2010-0668 Security vulnerability in MoinMoin
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.
network
moinmo
6.8