moziloCMS path traversal vulnerability

moziloCMS is an open source Content Management System CMS. It is aimed at users with little knowledge of HTML and is impressive for its beginner-friendly operation. A path traversal vulnerability exists in moziloCMS, which stems from the fact that mozilo 2.0 was found to be vulnerable to director...

moziloCMS 路径遍历漏洞

moziloCMS is an open source Content Management System CMS. It is aimed at users with little knowledge of HTML and is impressive for its beginner-friendly operation. A path traversal vulnerability exists in moziloCMS, which stems from the fact that mozilo 2.0 was found to be vulnerable to director...

moziloCMS Stored Cross-Site Scripting Vulnerability

moziloCMS is open source a content management system CMS. A security vulnerability exists in moziloCMS, which can be exploited by an attacker to execute arbitrary web script or HTML through a specially crafted load by entering the "Content" parameter...

CVE-2020-25394

A stored cross site scripting XSS vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Content" parameter...

Cross site scripting

A stored cross site scripting XSS vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Content" parameter...

CVE-2020-25394

The connected records confirm CVE-2020-25394 affects moziloCMS 2.0 with a stored XSS via the Content parameter. Authenticated users can inject web scripts/HTML, enabling arbitrary script execution in the context of the affected web app. The vulnerability is described consistently across CVE/NVD a...

CVE-2020-25394

A stored cross site scripting XSS vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Content" parameter...

moziloCMS 跨站脚本漏洞

moziloCMS is open source a content management system CMS. A security vulnerability exists in moziloCMS, which can be exploited by an attacker to execute arbitrary web script or HTML through a specially crafted load by entering the "Content" parameter...

moziloCMS 2.0 Cross Site Scripting

Exploit Title: moziloCMS 2.0 - Persistent Cross-Site Scripting Authenticated Date: 2020-08-31 Exploit Author: Abdulkadir Kaya Vendor Homepage: https://www.mozilo.de/ Version: 2.0 Tested on: Windows & WampServer 1- Go to following url. http://HOST/PATH/admin/ 2- Login the admin panel. 3- Go to...

moziloCMS 2.0 - Persistent Cross-Site Scripting (Authenticated)

Exploit Title: moziloCMS 2.0 - Persistent Cross-Site Scripting Authenticated Date: 2020-08-31 Exploit Author: Abdulkadir Kaya Vendor Homepage: https://www.mozilo.de/ Version: 2.0 Tested on: Windows & WampServer 1- Go to following url. http://HOST/PATH/admin/ 2- Login the admin panel. 3- Go to...

mozilocms 1.11 (lfi/pd/xss) Multiple Vulnerabilities

No description provided by source. + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...

moziloCMS 1.11 LFI

Local file include vulnerability in moziloCMS page parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Cross-site Scripting (XSS) Vulnerability in moziloCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in moziloCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in moziloCMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "pageconten...

moziloCMS Multiple Cross Site Scripting Vulnerabilities

The host is running moziloCMS and is prone to Multiple Cross Site Scripting Vulnerabilities OpenVAS Vulnerability Test $Id: gbmoziloCMSmultxssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ moziloCMS Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009...

CVE-2009-4209

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat and 2 file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367...

CVE-2009-4209

moziloCMS 1.11.1 is affected by multiple XSS vulnerabilities in admin/index.php (editsite action) via the cat and file parameters. The issue is confirmed by NVD/OpenVAS data referencing moziloCMS

[MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues

MajorSecurity Advisory 55moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues Details ======= Product: moziloCMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://cms.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovere...

moziloCMS 1.10.1 Traversal / XSS / Fixation

MajorSecurity Advisory 55moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues Details ======= Product: moziloCMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://cms.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovere...

[InterN0T] moziloCMS 1.11.1 - XSS Vulnerability

moziloCMS - Cross Site Scripting Vulnerability Version Affected: 1.11.1 19th May 2009 newest Info: See website for more information. It's in german and i don't bother translating Credits: InterN0T External Links: http://cms.mozilo.de/ -:: The Advisory ::- Vulnerable Function / ID Calls: XSS cat &...

CVE-2009-1367

Cross-site scripting XSS vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a...