CVE-2008-0782
Medium
Description
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Moinmoin
PublishedFeb 14, 2008
First seenFeb 14, 2008
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moinmoin moinmoin | 0.1, 0.2, 0.3, 0.7, 0.8, 0.9, 0.10, 0.11, 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.3_rc1, 1.5.3_rc2, 1.5.4, 1.5.5, 1.5.5_rc1, 1.5.5a, 1.5.6, 1.5.7, 1.5.8 | — |
| moinPyPI | v ≤ 1.5.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.