Lucene search

K
freebsdFreeBSDBFE218A5-4218-11DE-B67A-0030843D3802
HistoryApr 21, 2009 - 12:00 a.m.

moinmoin -- cross-site scripting vulnerabilities

2009-04-2100:00:00
vuxml.freebsd.org
17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.3%

Secunia reports:

Input passed via multiple parameters to action/AttachFile.py is not
properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user’s
browser session in the context of an affected site.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoinmoin< 1.8.3UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.3%