Vulnerability Details : CVE-2008-0780
Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2008-0780
- cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-0780
0.66%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 70 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-0780
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2008-0780
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-0780
-
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html
[SECURITY] Fedora 7 Update: moin-1.5.8-4.fc7
-
http://secunia.com/advisories/33755
About Secunia Research | Flexera
-
http://secunia.com/advisories/29262
About Secunia Research | Flexera
-
https://bugzilla.redhat.com/show_bug.cgi?id=432747
432747 – (CVE-2008-0780) CVE-2008-0780 MoinMoin XSS in login action
-
http://www.debian.org/security/2008/dsa-1514
[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
-
http://www.vupen.com/english/advisories/2008/0569/references
Webmail: access your OVH emails on ovhcloud.com | OVHcloud UK
-
http://www.securityfocus.com/bid/27904
-
http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml
MoinMoin: Multiple vulnerabilities (GLSA 200803-27) — Gentoo security
-
http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7
404 Not Found
-
http://secunia.com/advisories/28987
About Secunia Research | Flexera
-
http://secunia.com/advisories/29010
About Secunia Research | Flexera
-
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html
[SECURITY] Fedora 8 Update: moin-1.5.8-4.fc8
-
http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d
404 Not Found
-
https://usn.ubuntu.com/716-1/
404: Page not found | Ubuntu
-
http://secunia.com/advisories/29444
About Secunia Research | Flexera
Jump to