CVE-2008-0782
CVE-2008-0782
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
EPSS 14,9% · Código de explotación público
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
Fuentes originales
- http://secunia.com/advisories/33755
- http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml
- http://secunia.com/advisories/29262
- http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630
- http://secunia.com/advisories/29010
- http://www.attrition.org/pipermail/vim/2008-January/001890.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39837
- https://www.exploit-db.com/exploits/4957
- http://www.vupen.com/english/advisories/2008/0569/references
- http://secunia.com/advisories/29444
- http://www.securityfocus.com/bid/27404
- https://usn.ubuntu.com/716-1/
- http://www.debian.org/security/2008/dsa-1514
- https://nvd.nist.gov/vuln/detail/CVE-2008-0782