Moderate severityNVD Advisory· Published Jul 30, 2008· Updated Jun 16, 2026
CVE-2008-3381
CVE-2008-3381
Description
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
moinPyPI | < 1.6.4 | 1.6.4 |
moinPyPI | >= 1.7.0, < 1.7.1 | 1.7.1 |
Affected products
4- osv-coords2 versions
< 1.7.1-1+ 1 more
- (no CPE)range: < 1.7.1-1
- (no CPE)range: < 1.6.4
Patches
Vulnerability mechanics
References
14- hg.moinmo.in/moin/1.6/rev/8686a10f1f58nvdExploitWEB
- hg.moinmo.in/moin/1.7/rev/383196922b03nvdExploitWEB
- moinmo.in/SecurityFixesnvdExploitWEB
- secunia.com/advisories/31135nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-q7q4-5g8p-33fqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2008-3381ghsaADVISORY
- www.securityfocus.com/bid/30297nvdWEB
- www.vupen.com/english/advisories/2008/2147/referencesnvdWEB
- exchange.xforce.ibmcloud.com/vulnerabilities/43899nvdWEB
- github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2008-13.yamlghsaWEB
- web.archive.org/web/20090522153829/http://hg.moinmo.in/moin/1.7/raw-file/1.7.1/docs/CHANGESghsaWEB
- web.archive.org/web/20100207003615/http://hg.moinmo.in/moin/1.6/raw-file/1.6.4/docs/CHANGESghsaWEB
- web.archive.org/web/20100608030052/http://hg.moinmo.in/moin/1.6/rev/8686a10f1f58ghsaWEB
- web.archive.org/web/20100608030059/http://hg.moinmo.in/moin/1.7/rev/383196922b03ghsaWEB
News mentions
0No linked articles in our index yet.