MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
BID:28173
Info
MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 28173 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1098 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2008 12:00AM |
| Updated: | Jan 30 2009 06:59PM |
| Credit: | These vulnerabilities were disclosed in the referenced Debian security advisory. |
| Vulnerable: |
Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Red Hat Fedora 8 Red Hat Fedora 7 MoinMoin MoinMoin 1.6 MoinMoin MoinMoin 1.5.8 MoinMoin MoinMoin 1.5.7 MoinMoin MoinMoin 1.5.6 MoinMoin MoinMoin 1.5.5 MoinMoin MoinMoin 1.5.4 MoinMoin MoinMoin 1.5.3 MoinMoin MoinMoin 1.5.2 MoinMoin MoinMoin 1.5 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: | |
Discussion
MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
MoinMoin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
MoinMoin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
Exploit / POC
MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
Solution:
Please see the referenced advisories for details on obtaining and applying the appropriate updates.
Solution:
Please see the referenced advisories for details on obtaining and applying the appropriate updates.
References
MoinMoin GUI Editor Multiple Cross Site Scripting Vulnerabilities
References:
References:
- MoinMoin Homepage (MoinMoin)