CVE-2008-0782
MoinMoin Directory traversal vulnerability
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
- Record
CVE-2008-0782- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
- Record
CVE-2008-0782- Updated
- 2026-11-02
EUVDEUVD-2022-2737 No score
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
- Record
EUVD-2022-2737- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6766-r2rx-mfw9 No score
MoinMoin Directory traversal vulnerability
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on e69a16b6e630.
- Record
GHSA-6766-r2rx-mfw9- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-6766-r2rx-mfw9 No score
MoinMoin Directory traversal vulnerability
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on e69a16b6e630.
- Record
GHSA-6766-r2rx-mfw9- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVPYSEC-2026-668 No score
MoinMoin Directory traversal vulnerability
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. The issue has been fixed on e69a16b6e630.
- Record
PYSEC-2026-668- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass | 2008-01-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0782 is a medium vulnerability (CVSS 5.0) in Moinmoin, published February 14, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.9%, the 96th percentile. Fixed in moin 1.5.3-1.2etch1.
References
secunia.com/advisories/33755
gentoo.org/security/en/glsa/glsa-200803-27.xml
hg.moinmo.in/moin/1.5/rev/e69a16b6e630
attrition.org/pipermail/vim/2008-January/001890.html
Show 10 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/39837
exploit-db.com/exploits/4957
vupen.com/english/advisories/2008/0569/references
securityfocus.com/bid/27404
usn.ubuntu.com/716-1
debian.org/security/2008/dsa-1514
nvd.nist.gov/vuln/detail/CVE-2008-0782
github.com/advisories/GHSA-6766-r2rx-mfw9
pypi.org/project/moin