Test ID:	1.3.6.1.4.1.25623.1.0.108324
Category:	Web application abuses
Title:	MoinMoin < 1.9.4 Cross-Site Scripting Vulnerabilities - Linux
Summary:	MoinMoin is prone to multiple cross-site scripting vulnerabilities because it; fails to sufficiently sanitize user-supplied input data in the xslt and rst parser.
Description:	Summary: MoinMoin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data in the xslt and rst parser. Vulnerability Impact: An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: MoinMoin 1.9.3 and prior are vulnerable. Solution: Update to version 1.9.4 or later. Please see the references for more information. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1058 BugTraq ID: 46476 http://www.securityfocus.com/bid/46476 Debian Security Information: DSA-2321 (Google Search) http://www.debian.org/security/2011/dsa-2321 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html http://secunia.com/advisories/43413 http://secunia.com/advisories/43665 http://secunia.com/advisories/50885 http://www.ubuntu.com/usn/USN-1604-1 http://www.vupen.com/english/advisories/2011/0455 http://www.vupen.com/english/advisories/2011/0571 http://www.vupen.com/english/advisories/2011/0588 XForce ISS Database: moinmoin-refuri-xss(65545) https://exchange.xforce.ibmcloud.com/vulnerabilities/65545
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.