CVE-2008-0782Medium▾ TwilightPoC availableMoinMoin Directory traversal vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 27.5 · likelihood 3 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
15%
15% → 15%
Exploit-DB (last check)
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on e69a16b6e630.
moin <= 1.5.8Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2008-1099MediumMoinMoin Improper Access Control
CVE-2008-1098MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0781MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2008-0780MediumMoinMoin Cross-site scripting (XSS) vulnerability
CVE-2009-0260MediumMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
CVE-2009-0312MediumMoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature