----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
MoinMoin Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA29010

VERIFY ADVISORY:
http://secunia.com/advisories/29010/

CRITICAL:
Highly critical

IMPACT:
Cross Site Scripting, DoS, System access

WHERE:
>From remote

SOFTWARE:
MoinMoin 1.x
http://secunia.com/product/2579/

DESCRIPTION:
Some vulnerabilities have been reported in MoinMoin, which can be
exploited by malicious people to conduct cross-site scripting
attacks, to manipulate certain data, or potentially to compromise a
vulnerable system.

1) Input passed to the "name" parameter when logging in is not
properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user's
browser session in context of an affected site.

The vulnerability is reported in versions prior to 1.6.1.

2) Input passed to action/AttachFile.py is not properly sanitised
before being returned to the user. This can be exploited to execute
arbitrary HTML and script code in a user's browser session in context
of an affected site.

3) Input passed to the MOIN_ID cookie parameter is not properly
sanitised before being used. This can be exploited to overwrite
arbitrary files via directory traversal attacks.

Successful exploitation may allow to inject and execute arbitrary PHP
code but depends on certain file permissions and settings of the
server.

Vulnerabilities 2# and #3 are reported in version 1.5.8. Other
versions may also be affected.

SOLUTION:
Update to version 1.6.1.
http://moinmo.in/MoinMoinDownload

PROVIDED AND/OR DISCOVERED BY:
3) nonroot

ORIGINAL ADVISORY:
MoinMoin:
http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7
http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef
http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d

http://www.milw0rm.com/exploits/4957

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------