FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-0828

This CVE name corresponds to:

Entered	Topic
2011-01-11	MoinMoin -- cross-site scripting vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-0828 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-0828
Phase	Assigned(20100303)

Description

Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

References

Source	Reference
CONFIRM	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575995
CONFIRM	http://hg.moinmo.in/moin/1.9/rev/6e603e5411ca
CONFIRM	https://bugs.launchpad.net/ubuntu/+source/moin/+bug/538022
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=578801
DEBIAN	DSA-2024
FEDORA	FEDORA-2010-6012
FEDORA	FEDORA-2010-6134
FEDORA	FEDORA-2010-6180
UBUNTU	USN-925-1
BID	39110
SECUNIA	39188
SECUNIA	39190
SECUNIA	39267
SECUNIA	39284
VUPEN	ADV-2010-0767
VUPEN	ADV-2010-0831
VUPEN	ADV-2010-0834
XF	moinmoin-despam-xss(57435)