Some vulnerabilities with an unknown impact have been reported in MoinMoin.

1) A vulnerability is caused due to an unspecified error. No further information is currently available.

The vulnerability is reported in versions 1.5.0 through 1.9.1.

2) A vulnerability is caused due to an unspecified error related to the "xmlrpc" action. No further information is currently available.

Successful exploitation requires that the "xmlrpc" action is enabled (disabled by default).

The vulnerability is reported in all versions through 1.9.1.

3) A vulnerability is caused due to an unspecified error related to the "SyncPages" action. No further information is currently available.

Successful exploitation requires that the "SyncPages" action is enabled.

The vulnerability is reported in versions 1.6.x through 1.9.1.

4) A vulnerability is caused due to an unspecified error within the OpenID authentication code. No further information is currently available.

Successful exploitation requires that the OpenID authentication is configured and used (not used by default).

The vulnerability is reported in versions 1.7.x through 1.9.1.

Solution
Update to version 1.8.7 or 1.9.2.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://moinmo.in/SecurityFixes
http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES

Deep Links
Links available to Secunia VIM customers