NVD

Id
47594  
Name
CVE-2009-0260  
Description
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-01-23  
Modified Date
2016-12-07  
Seq
2009-0260  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238498 47594 CVE-2009-0260 http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1  View
238499 47594 CVE-2009-0260 http://moinmo.in/SecurityFixes#moin1.8.1  View
238500 47594 CVE-2009-0260 20090120 MoinMoin Wiki Engine XSS Vulnerability  View
238501 47594 CVE-2009-0260 33365  View
238502 47594 CVE-2009-0260 USN-716-1  View
238503 47594 CVE-2009-0260 ADV-2009-0195  View
238504 47594 CVE-2009-0260 moinmoin-attachfilepy-xss(48126)  View
238505 47594 CVE-2009-0260 DSA-1715  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40623 JVNDB-2009-001629 MoinMoin の action/AttachFile.py における複数のクロスサイトスクリプティングの脆弱性 MoinMoin の action/AttachFile.py には、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0260 37691 CVE-2009-0260 47594 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001629.html 2009-01-23 2009-07-08 View