Home > Vulnerability Database > CVE-2010-2487

Mend.io Vulnerability Database

CVE-2010-2487

Date: August 4, 2010

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py.

Language: Python

Severity Score

6.1

Related Resources (23)

Url: http://www.vupen.com/english/advisories/2010/1981

Url: http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg

Url: https://web.archive.org/web/20200228150629/http://www.securityfocus.com/bid/40549

Url: http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513

Url: http://secunia.com/advisories/40836

Url: https://web.archive.org/web/20140801154518/http://secunia.com/advisories/40836

Url: http://www.securityfocus.com/bid/40549

Url: http://marc.info/?l=oss-security&m=127809682420259&w=2

Url: http://www.debian.org/security/2010/dsa-2083

Url: https://github.com/moinwiki/moin

Url: http://hg.moinmo.in/moin/1.8/rev/4238b0c90871

Url: http://marc.info/?l=oss-security&m=127799369406968&w=2

Url: http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES

Url: http://moinmo.in/SecurityFixes

Url: http://hg.moinmo.in/moin/1.9/rev/e50b087c4572

Url: http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-2487

Url: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809

Url: http://moinmo.in/MoinMoinRelease1.9

Url: https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-16.yaml

Url: http://hg.moinmo.in/moin/1.7/rev/37306fba2189

Url: http://moinmo.in/MoinMoinRelease1.8

Url: https://www.mend.io/vulnerability-database/CVE-2010-2487

Severity Score

6.1

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-2487

Date: August 4, 2010

Language: Python

Severity Score

Related Resources (23)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?