NVD

Id
1059  
Name
CVE-2008-1098  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim"s rename attempt fails because of a duplicate name. NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-03-05  
Modified Date
2009-02-05  
Seq
2008-1098  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6500 1059 CVE-2008-1098 http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd  View
6501 1059 CVE-2008-1098 http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499  View
6502 1059 CVE-2008-1098 http://moinmo.in/SecurityFixes  View
6503 1059 CVE-2008-1098 DSA-1514  View
6504 1059 CVE-2008-1098 GLSA-200803-27  View
6505 1059 CVE-2008-1098 28173  View
6506 1059 CVE-2008-1098 USN-716-1  View
6507 1059 CVE-2008-1098 moinmoin-multiple-actions-xss(41037)  View
6508 1059 CVE-2008-1098 FEDORA-2008-3301  View
6509 1059 CVE-2008-1098 FEDORA-2008-3328  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56114 JVNDB-2007-004806 MoinMoin におけるクロスサイトスクリプティングの脆弱性 MoinMoin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1098 31211 CVE-2008-1098 1059 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004806.html 2007-08-28 2012-09-25 View