NVD

Id
14400  
Name
CVE-2010-2970  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.py, a similar issue to CVE-2010-2487.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2010-08-05  
Seq
2010-2970  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79786 14400 CVE-2010-2970 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809  View
79787 14400 CVE-2010-2970 http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES  View
79788 14400 CVE-2010-2970 http://hg.moinmo.in/moin/1.9/rev/4fe9951788cb  View
79789 14400 CVE-2010-2970 http://hg.moinmo.in/moin/1.9/rev/e50b087c4572  View
79790 14400 CVE-2010-2970 [oss-security] 20100701 CVE request: moin multiple XSS  View
79791 14400 CVE-2010-2970 [oss-security] 20100702 Re: CVE request: moin multiple XSS  View
79792 14400 CVE-2010-2970 http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg  View
79793 14400 CVE-2010-2970 http://moinmo.in/MoinMoinRelease1.9  View
79794 14400 CVE-2010-2970 http://moinmo.in/SecurityFixes  View
79795 14400 CVE-2010-2970 DSA-2083  View
79796 14400 CVE-2010-2970 40549  View
79797 14400 CVE-2010-2970 ADV-2010-1981  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39206 JVNDB-2010-004991 MoinMoin におけるクロスサイトスクリプティングの脆弱性 MoinMoin には、以下の不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2970 45550 CVE-2010-2970 14400 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004991.html 2010-06-07 2012-09-25 View