Search for packages
| purl | pkg:pypi/moin@1.9.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2020-67
Aliases: CVE-2020-25074 GHSA-52q8-877j-gghq |
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who … |
Vulnerable |
|
PYSEC-2020-241
Aliases: CVE-2020-15275 GHSA-4q96-6xhq-ff43 |
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file … |
Vulnerable |
|
PYSEC-2018-47
Aliases: CVE-2017-5934 GHSA-42fp-4hm3-j8r7 |
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject … |
Vulnerable |
|
GHSA-876c-qmcf-cxv6
Aliases: CVE-2010-0667 |
MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set MoinMoin 1.9 before 1.9.1 does not perform the expected clearing … |
Vulnerable |
|
GHSA-g4mx-rm5q-vh24
Aliases: CVE-2012-4404 |
MoinMoin Improper Access Control `security/__init__.py` in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group … |
Vulnerable |
|
GHSA-fc72-v54c-x9jg
Aliases: CVE-2010-0828 |
MoinMoin Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in `action/Despam.py` in the Despam action module in MoinMoin 1.8.7 and … |
Vulnerable |
|
GHSA-977v-29j9-9rxc
Aliases: CVE-2010-0669 |
MoinMoin improper sanitizes user profiles MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has … |
Vulnerable |
|
GHSA-2j76-26qq-7rvv
Aliases: CVE-2010-2969 |
MoinMoin cross-site scripting (XSS) vulnerability Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow … |
Vulnerable |
|
GHSA-574f-mh6m-c6qm
Aliases: CVE-2010-0668 |
MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x … |
Vulnerable |
|
GHSA-5m2m-27cg-7v4v
Aliases: CVE-2010-2487 |
MoinMoin Cross-site Scripting (XSS) vulnerability Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x … |
Vulnerable |
|
PYSEC-2012-10
Aliases: CVE-2012-4404 GHSA-g4mx-rm5q-vh24 |
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," … |
Vulnerable |
|
PYSEC-2010-15
Aliases: CVE-2010-0668 GHSA-574f-mh6m-c6qm |
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, … |
Vulnerable Vulnerable |
|
PYSEC-2010-28
Aliases: CVE-2010-0828 GHSA-fc72-v54c-x9jg |
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users … |
Vulnerable |
|
PYSEC-2009-11
Aliases: CVE-2008-6548 GHSA-jhxw-4hw4-mhh7 |
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to … | There are no reported fixed by versions. |
|
PYSEC-2011-6
Aliases: CVE-2011-1058 GHSA-m9j7-xcj7-42j9 |
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or … |
Vulnerable |
|
PYSEC-2013-6
Aliases: CVE-2012-6081 GHSA-m2c4-jgmm-fvq3 |
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow … |
Vulnerable |
|
PYSEC-2010-2
Aliases: CVE-2010-0669 GHSA-977v-29j9-9rxc |
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. |
Vulnerable Vulnerable |
|
PYSEC-2016-30
Aliases: CVE-2016-7146 GHSA-fj26-q4vh-85f6 |
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related … |
Vulnerable |
|
PYSEC-2010-17
Aliases: CVE-2010-2969 GHSA-2j76-26qq-7rvv |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary … |
Vulnerable |
|
PYSEC-2013-23
Aliases: CVE-2012-6082 GHSA-452h-rx28-49w9 |
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web … |
Vulnerable |
|
PYSEC-2010-16
Aliases: CVE-2010-2487 GHSA-5m2m-27cg-7v4v |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers … |
Vulnerable |
|
PYSEC-2013-7
Aliases: CVE-2012-6495 GHSA-6gx4-29v9-g9q5 |
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote … |
Vulnerable |
|
PYSEC-2010-14
Aliases: CVE-2010-0667 GHSA-876c-qmcf-cxv6 |
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment … |
Vulnerable |
|
PYSEC-2010-18
Aliases: CVE-2010-2970 GHSA-gxh5-r8gp-pjc3 |
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML … |
Vulnerable |
|
PYSEC-2016-31
Aliases: CVE-2016-7148 GHSA-3x76-j3jj-439j |
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross … |
Vulnerable |
|
PYSEC-2017-20
Aliases: CVE-2016-9119 GHSA-5fq5-pfv8-mrfv |
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject … |
Vulnerable |