Advisory details:
github_osv / GHSA-6766-r2rx-mfw9
| Advisory ID | github_osv/GHSA-6766-r2rx-mfw9 |
| Aliases |
CVE-2008-0782
|
| Summary | MoinMoin Directory traversal vulnerability Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a `..` (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on [e69a16b6e630](http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630). |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| generic_textual | MODERATE |
| Data source | Exploit-DB |
|---|---|
| Date added | Jan. 20, 2008 |
| Description | MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass |
| Ransomware campaign use | Known |
| Source publication date | Jan. 21, 2008 |
| Exploit type | webapps |
| Platform | php |
| Source update date | Nov. 22, 2017 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.