CVE ID:	CVE-2008-0781
Description:	Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
Test IDs:	1.3.6.1.4.1.25623.1.0.60417   1.3.6.1.4.1.25623.1.0.63880   1.3.6.1.4.1.25623.1.0.60416   1.3.6.1.4.1.25623.1.0.63881   1.3.6.1.4.1.25623.1.0.60500
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0781 BugTraq ID: 27904 http://www.securityfocus.com/bid/27904 Debian Security Information: DSA-1514 (Google Search) http://www.debian.org/security/2008/dsa-1514 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml http://secunia.com/advisories/28987 http://secunia.com/advisories/29010 http://secunia.com/advisories/29262 http://secunia.com/advisories/29444 http://secunia.com/advisories/33755 https://usn.ubuntu.com/716-1/ http://www.vupen.com/english/advisories/2008/0569/references