CVE

Id
45553  
CVE No.
CVE-2010-2969  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) action/userprofile.py, a similar issue to CVE-2010-2487.  
Phase
Assigned (20100804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496256 45553 CVE-2010-2969 MLIST:[oss-security] 20100701 CVE request: moin multiple XSS  View
496257 45553 CVE-2010-2969 URL:http://marc.info/?l=oss-security&m=127799369406968&w=2  View
496258 45553 CVE-2010-2969 MLIST:[oss-security] 20100702 Re: CVE request: moin multiple XSS  View
496259 45553 CVE-2010-2969 URL:http://marc.info/?l=oss-security&m=127809682420259&w=2  View
496260 45553 CVE-2010-2969 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809  View
496261 45553 CVE-2010-2969 CONFIRM:http://hg.moinmo.in/moin/1.7/rev/37306fba2189  View
496262 45553 CVE-2010-2969 CONFIRM:http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES  View
496263 45553 CVE-2010-2969 CONFIRM:http://hg.moinmo.in/moin/1.9/rev/e50b087c4572  View
496264 45553 CVE-2010-2969 CONFIRM:http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg  View
496265 45553 CVE-2010-2969 CONFIRM:http://moinmo.in/MoinMoinRelease1.9  View
496266 45553 CVE-2010-2969 CONFIRM:http://moinmo.in/SecurityFixes  View
496267 45553 CVE-2010-2969 DEBIAN:DSA-2083  View
496268 45553 CVE-2010-2969 URL:http://www.debian.org/security/2010/dsa-2083  View
496269 45553 CVE-2010-2969 BID:40549  View
496270 45553 CVE-2010-2969 URL:http://www.securityfocus.com/bid/40549  View
496271 45553 CVE-2010-2969 SECUNIA:40836  View
496272 45553 CVE-2010-2969 URL:http://secunia.com/advisories/40836  View
496273 45553 CVE-2010-2969 VUPEN:ADV-2010-1981  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36169 JVNDB-2010-001949 iPhone および iPod touch 上で稼動する Apple iOS の IOSurface における整数オーバーフローの脆弱性 iPhone および iPod touch 上で稼動する Apple iOS の IOSurface には、整数オーバーフローの脆弱性が存在します。 CVE-2010-2973 45553 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001949.html  View