Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-0781
HistoryFeb 14, 2008 - 12:00 a.m.

CVE-2008-0781

2008-02-1400:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

74.0%

Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py
in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary
web script or HTML via (1) message, (2) pagename, and (3) target filenames.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmoin< 1.5.2-1ubuntu2.4UNKNOWN
ubuntu7.10noarchmoin< 1.5.7-3ubuntu2.1UNKNOWN
ubuntu8.04noarchmoin< 1.5.8-5.1ubuntu2.2UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

74.0%