CVE-2007-0901: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0901?
CVE-2007-0901 is considered a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2007-0901?
To fix CVE-2007-0901, upgrade to MoinMoin version 1.5.8 or later.
What types of vulnerabilities does CVE-2007-0901 represent?
CVE-2007-0901 represents multiple cross-site scripting (XSS) vulnerabilities in the Info pages of MoinMoin.
Which versions of MoinMoin are affected by CVE-2007-0901?
CVE-2007-0901 affects MoinMoin version 1.5.7 and earlier versions.
Can CVE-2007-0901 allow attackers to execute scripts on the server?
No, CVE-2007-0901 allows attackers to inject scripts only within the context of the victim's browser, not on the server.