Test ID:	1.3.6.1.4.1.25623.1.0.100696
Category:	Web application abuses
Title:	MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability
Summary:	MoinMoin is prone to a cross-site scripting vulnerability because it; fails to sufficiently sanitize user-supplied input data.
Description:	Summary: MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: MoinMoin 1.9.2 and prior are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2969 BugTraq ID: 40549 http://www.securityfocus.com/bid/40549 Debian Security Information: DSA-2083 (Google Search) http://www.debian.org/security/2010/dsa-2083 http://marc.info/?l=oss-security&m=127799369406968&w=2 http://marc.info/?l=oss-security&m=127809682420259&w=2 http://secunia.com/advisories/40836 http://www.vupen.com/english/advisories/2010/1981 Common Vulnerability Exposure (CVE) ID: CVE-2010-2970 Common Vulnerability Exposure (CVE) ID: CVE-2010-2487 40549 40836 ADV-2010-1981 DSA-2083 [oss-security] 20100701 CVE request: moin multiple XSS [oss-security] 20100702 Re: CVE request: moin multiple XSS http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809 http://hg.moinmo.in/moin/1.7/rev/37306fba2189 http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES http://hg.moinmo.in/moin/1.8/rev/4238b0c90871 http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513 http://hg.moinmo.in/moin/1.9/rev/e50b087c4572 http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg http://moinmo.in/MoinMoinRelease1.8 http://moinmo.in/MoinMoinRelease1.9 http://moinmo.in/SecurityFixes
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.