GCVE - cpe:2.3:a:moinmo:moinmoin:1.7.0:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:moinmo:moinmoin:1.7.0:rc2:*:*:*:*:*:*

part: a version: 1.7.0 update: rc2

Vendor	Moinmo (`58c70b4d-cd8a-507b-9233-feb4a4950633`)
Product	Moinmoin (`f3d95b03-b7c6-513e-b92d-927b96b7f8a5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/python-moinmoin`	purl2cpe	2026-06-01 10:13:26.276013
`pkg:deb/ubuntu/python-moinmoin`	purl2cpe	2026-06-01 10:13:26.276014
`pkg:github/moinwiki/moin`	purl2cpe	2026-06-01 10:13:26.276015
`pkg:github/moinwiki/moin-1.9`	purl2cpe	2026-06-01 10:13:26.276017
`pkg:pypi/moin`	purl2cpe	2026-06-01 10:13:26.276018
`pkg:rpm/opensuse/python-moin`	purl2cpe	2026-06-01 10:13:26.276019

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6495`	vulnerable	2026-06-08 05:03:00.500480	Details available Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code. Published: 2013-01-03T01:00:00.000Z Updated: 2024-09-16T23:26:18.200Z Open on db.gcve.eu Reference links http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f http://www.debian.org/security/2012/dsa-2593 https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6081`	vulnerable	2026-06-08 05:02:59.254459	Details available Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as exploited in the wild in July 2012. Published: 2013-01-03T01:00:00.000Z Updated: 2024-08-06T21:21:28.522Z Open on db.gcve.eu Reference links http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes http://secunia.com/advisories/51663 http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f http://www.debian.org/security/2012/dsa-2593	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1058`	vulnerable	2026-06-08 04:56:41.037406	Details available Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information. Published: 2011-02-22T17:00:00.000Z Updated: 2024-08-06T22:14:27.368Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46476 http://www.ubuntu.com/usn/USN-1604-1 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html http://moinmo.in/SecurityFixes http://www.debian.org/security/2011/dsa-2321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2969`	vulnerable	2026-06-08 04:55:11.869829	Details available Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) action/userprofile.py, a similar issue to CVE-2010-2487. Published: 2010-08-04T21:00:00.000Z Updated: 2024-09-16T20:38:11.680Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1981 http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes http://www.securityfocus.com/bid/40549 http://www.debian.org/security/2010/dsa-2083	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2487`	vulnerable	2026-06-08 04:55:08.154118	Details available Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py. Published: 2010-08-04T21:00:00.000Z Updated: 2024-08-07T02:32:16.844Z Open on db.gcve.eu Reference links http://hg.moinmo.in/moin/1.8/rev/4238b0c90871 http://www.vupen.com/english/advisories/2010/1981 http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes http://www.securityfocus.com/bid/40549	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0717`	vulnerable	2026-06-08 04:52:04.118586	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0669`	vulnerable	2026-06-08 04:52:03.894777	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0668`	vulnerable	2026-06-08 04:52:03.887182	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

moinmo MoinMoin 1.7.0 release candidate 2

Notes

PURL mappings

Vulnerability references

Contribute