97 matches found
CVE-2009-1369
moziloCMS 1.11 allows remote attackers to obtain sensitive information via the 1 gal parameter to gallery.php, 2 page and 3 cat parameter to index.php, or 4 file parameter to download.php, which reveals the installation path in an error message...
CVE-2009-1367
Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...
CVE-2009-1368
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...
Directory traversal
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3...
CVE-2009-1368
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3...
CVE-2009-1368
CVE-2009-1368 describes a directory traversal vulnerability in moziloCMS 1.11 where an attacker can read arbitrary files by injecting a deroute “..” into the page parameter of index.php. Related entries indicate a similar issue in moziloCMS 1.10.2 and earlier (CVE-2008-6126) with the same dot-dot...
CVE-2009-1369
moziloCMS 1.11 allows remote attackers to obtain sensitive information via the 1 gal parameter to gallery.php, 2 page and 3 cat parameter to index.php, or 4 file parameter to download.php, which reveals the installation path in an error message...
CVE-2009-1367
Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...
CVE-2009-1367
MoziloCMS vulnerability CVE-2009-1367 affects moziloCMS 1.11 (index.php) with XSS via the search action parameter. The OpenVAS entry also notes a local file-include (LFI) and XSS issue in moziloCMS, indicating input sanitization failures. Affected component: moziloCMS web application; issue type:...
CVE-2009-1369
MoziloCMS 1.11 is affected by CVE-2009-1369. The vulnerability allows remote attackers to obtain sensitive information by triggering error messages through specific parameters: gal[] in gallery.php, page[] and cat[] in index.php, and file[] in download.php, which reveal the installation path. The...
moziloCMS Detection
This host is running moziloCMS, a free CMS software written in PHP. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MoziloCMS Local File Include and Cross Site Scripting Vulnerabilities
MoziloCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...
MoziloCMS Local File Include and Cross Site Scripting Vulnerabilities
MoziloCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
mozilloCMS 1.11 LFI / XSS
moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...
moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting
moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 :...
moziloCMS 1.11 (LFI/PD/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilities =========================================================== + Local File Inclusion PoC 1 :...
moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting
moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...
CVE-2008-6127
Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...