NVD

Id
47032  
Name
CVE-2012-6081  
Description
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-02  
Modified Date
2013-12-13  
Seq
2012-6081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235538 47032 CVE-2012-6081 http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f  View
235539 47032 CVE-2012-6081 http://moinmo.in/MoinMoinRelease1.9  View
235540 47032 CVE-2012-6081 http://moinmo.in/SecurityFixes  View
235541 47032 CVE-2012-6081 USN-1680-1  View
235542 47032 CVE-2012-6081 DSA-2593  View
235543 47032 CVE-2012-6081 25304  View
235544 47032 CVE-2012-6081 [oss-security] 20121229 CVE request: MoinMoin Wiki (remote code execution vulnerability)  View
235545 47032 CVE-2012-6081 [oss-security] 20121229 Re: CVE request: MoinMoin Wiki (remote code execution vulnerability)  View
235546 47032 CVE-2012-6081 57082  View
235547 47032 CVE-2012-6081 https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30156 JVNDB-2012-005863 MoinMoin における任意のコードを実行される脆弱性 MoinMoin の (1) twikidraw (action/twikidraw.py) および (2) anywikidraw (action/anywikidraw.py) アクションには、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2012-6081 59319 CVE-2012-6081 47032 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005863.html 2012-12-29 2013-01-07 View