=============================================================== !vuln
MoinMoin v1.5.9 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. MoinMoin v1.80 is also affected to a lesser extent. Other versions may also be affected. =============================================================== =============================================================== !dork Dork: "* MoinMoin Powered * Python Powered * Valid HTML 4.01" =============================================================== =============================================================== !risk 1 - Denial Of Service Low The denial of service only results on the end-users side. =============================================================== =============================================================== !discussion 1 - Denial Of Service http://wiki.site.org/%08?action=fullsearch&value=linkto%3A%22%0 8%22&context=180 Changing the URL of a linkto URl results in end-user denial of service conditions if ASCII characters are injected. =============================================================== =============================================================== !risk 2 - Full Path Disclosure Medium Attackers can use this vulnerability to leverage another attack after the full path has been disclosed. =============================================================== =============================================================== !discussion 2 - Full Path Disclosure http://wiki.site.org/VulnVulnVulnVuln/VulnVulnVuln/Vul......... A remote user is able to identify several details about the system from the python traceback error after injecting an extremely long URL string. The uname -a (the platform and OS), the python release, the full path of the htdocs folder and python folder, and the version of MoinMoin that is running. However, MoinMoin v1.80 does not disclose the python release and the version of MoinMoin. =============================================================== =============================================================== !solution MoinMoin can still be used, but be wary of the full path disclosure. The vendor has not yet been notified. =============================================================== =============================================================== !greetz Greetz go out to the people who know me. =============================================================== =============================================================== !author Xia Shing Zee ===============================================================
