MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

Description

References

• nvd.nist.gov/vuln/detail/CVE-2009-0312 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/48306 · WEB
• usn.ubuntu.com/716-1 · WEB
• web.archive.org/web/20090323075215/http://hg.moinmo.in/moin/1.8/raw-file/1.8.2/docs/CHANGES · WEB
• web.archive.org/web/20100825000634/http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad · WEB
• web.archive.org/web/20200228151935/http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad · WEB
• debian.org/security/2009/dsa-1715 · WEB
• moinmo.in/SecurityFixes · WEB
• osvdb.org/51632 · WEB
• secunia.com/advisories/33716 · WEB
• secunia.com/advisories/33755 · WEB
• openwall.com/lists/oss-security/2009/01/27/4

moin 的其他漏洞

• CVE-2020-15275中危 5.4MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malici…
• CVE-2020-25074严重 9.8The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who ca…
• CVE-2017-5934中危 6.1Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbi…
• CVE-2016-9119中危 6.1Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbit…
• CVE-2016-7148中危 6.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross …