Moderate severityNVD Advisory· Published Feb 14, 2008· Updated Jun 16, 2026
CVE-2008-0781
CVE-2008-0781
Description
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
moinPyPI | <= 1.5.8 | — |
Affected products
27cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
17- github.com/advisories/GHSA-775g-4482-pm94ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2008-0781ghsaADVISORY
- hg.moinmo.in/moin/1.5/rev/db212dfc58efnvdWEB
- secunia.com/advisories/28987nvdWEB
- secunia.com/advisories/29010nvdWEB
- secunia.com/advisories/29262nvdWEB
- secunia.com/advisories/29444nvdWEB
- secunia.com/advisories/33755nvdWEB
- www.debian.org/security/2008/dsa-1514nvdWEB
- www.gentoo.org/security/en/glsa/glsa-200803-27.xmlnvdWEB
- www.securityfocus.com/bid/27904nvdWEB
- www.vupen.com/english/advisories/2008/0569/referencesnvdWEB
- bugzilla.redhat.com/show_bug.cginvdWEB
- usn.ubuntu.com/716-1ghsaWEB
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.htmlnvdWEB
- www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.htmlnvdWEB
- usn.ubuntu.com/716-1/nvd
News mentions
0No linked articles in our index yet.