CVE		CVE-2010-0669
Status		Candidate
Description		MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
Severity		High
CVSS score		7,5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Phase		Assigned (31.03.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0669
References		BID : 38023
		CONFIRM : http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/C...
		CONFIRM : http://moinmo.in/MoinMoinRelease1.8
		CONFIRM : http://moinmo.in/SecurityFixes
		DEBIAN : DSA-2014
		MLIST : [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7
		MLIST : [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7
		MLIST : [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7
		SECUNIA : 38444
		SECUNIA : 38903
		VUPEN : ADV-2010-0600
SecurityVulns:		Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)