TUCoPS :: HP Unsorted M

TUCoPS :: HP Unsorted M :: va2371.htm
MoinMoin Wiki Engine XSS Vulnerability

MoinMoin Wiki Engine XSS Vulnerability MoinMoin Wiki Engine XSS Vulnerability


MoinMoin Wiki Engine Cross-Site Scripting

Discovered by: SecureState R&D Team (sasquatch)

Website: www.securestate.com 

Discovered: 01-08-09

Vendor Notified: 01-08-09

Vendor Fix Issued: 01-11-09 (http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1) 

Vendor Fix:  Upgrade to version 1.8.1 

Public Posting: 01-19-09

Example:
&action=AttachFile&drawing=">