This host is installed with MoinMoin and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary HTML or web script in a user's browser session in the context of an affected site, uplaod malicious script and overwrite arbitrary files via directory traversal sequences. Impact Level: Application

Update to MoinMoin 1.9.6 or later, For updates refer to http://moinmo.in/MoinMoinDownload

Multiple flaws due to, - Certain input when handling the AttachFile action is not properly verified before being used to write files. - The application allows the upload of files with arbitrary extensions to a folder inside the webroot when handling the twikidraw or anywikidraw actions. - Input passed via page name in rss link is not properly sanitised before being displayed to the user.

MoinMoin version 1.9.x prior to 1.9.6

• http://moinmo.in/SecurityFixes
• http://secunia.com/advisories/51663
• http://www.openwall.com/lists/oss-security/2012/12/29/6
• http://www.openwall.com/lists/oss-security/2012/12/30/6
• http://www.osvdb.com/88827
• http://www.osvdb.com/88828

---

Updated on 2017-03-28