CVE		CVE-2010-0717
Status		Candidate
Description		The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
Severity		High
CVSS score		7,5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Phase		Assigned (05.06.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0717
References		CONFIRM : http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/C...
		CONFIRM : http://moinmo.in/MoinMoinRelease1.8
		DEBIAN : DSA-2014
		MLIST : [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7
		SECUNIA : 38903
		VUPEN : ADV-2010-0600
		XF : moinmoin-cfgpackagepages-unspecified(56595)
SecurityVulns:		Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)