CVE

Id
31215  
CVE No.
CVE-2008-1098  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim"s rename attempt fails because of a duplicate name. NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780.  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332939 31215 CVE-2008-1098 CONFIRM:http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd  View
332940 31215 CVE-2008-1098 CONFIRM:http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499  View
332941 31215 CVE-2008-1098 CONFIRM:http://moinmo.in/SecurityFixes  View
332942 31215 CVE-2008-1098 DEBIAN:DSA-1514  View
332943 31215 CVE-2008-1098 URL:http://www.debian.org/security/2008/dsa-1514  View
332944 31215 CVE-2008-1098 FEDORA:FEDORA-2008-3301  View
332945 31215 CVE-2008-1098 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html  View
332946 31215 CVE-2008-1098 FEDORA:FEDORA-2008-3328  View
332947 31215 CVE-2008-1098 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html  View
332948 31215 CVE-2008-1098 GENTOO:GLSA-200803-27  View
332949 31215 CVE-2008-1098 URL:http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml  View
332950 31215 CVE-2008-1098 UBUNTU:USN-716-1  View
332951 31215 CVE-2008-1098 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-716-1  View
332952 31215 CVE-2008-1098 BID:28173  View
332953 31215 CVE-2008-1098 URL:http://www.securityfocus.com/bid/28173  View
332954 31215 CVE-2008-1098 SECUNIA:29262  View
332955 31215 CVE-2008-1098 URL:http://secunia.com/advisories/29262  View
332956 31215 CVE-2008-1098 SECUNIA:29444  View
332957 31215 CVE-2008-1098 URL:http://secunia.com/advisories/29444  View
332958 31215 CVE-2008-1098 SECUNIA:30031  View
332959 31215 CVE-2008-1098 URL:http://secunia.com/advisories/30031  View
332960 31215 CVE-2008-1098 SECUNIA:33755  View
332961 31215 CVE-2008-1098 URL:http://secunia.com/advisories/33755  View
332962 31215 CVE-2008-1098 XF:moinmoin-multiple-actions-xss(41037)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47474 JVNDB-2008-002784 Blender の imb_loadhdr 関数におけるスタックベースのバッファオーバーフローの脆弱性 Blender の imb_loadhdr 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-1102 31215 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002784.html  View