FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

moinmoin -- cross-site scripting vulnerabilities

Affected packages
		moinmoin	<	1.8.3

Details

VuXML ID	bfe218a5-4218-11de-b67a-0030843d3802
Discovery	2009-04-21
Entry	2009-05-16

Secunia reports:

Input passed via multiple parameters to action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site.

[source]

References

CVE Name	CVE-2009-1482
URL	http://moinmo.in/SecurityFixes
URL	http://secunia.com/advisories/34821/