Session fixation

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6128

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6127

CVE-2008-6127 affects moziloCMS

CVE-2008-6126

Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter to download.php and the 2 page parameter to index.php, a different vector than CVE-2008-3589...

CVE-2008-6126

CVE-2008-6126 affects moziloCMS 1.10.2 and earlier. The vulnerability is a directory traversal in moziloCMS via a .. in the file parameter to download.php and the page parameter to index.php, enabling remote reading of arbitrary files. Affected components: download.php and index.php within mozilo...

CVE-2008-6128

CVE-2008-6128 is a session-fixation vulnerability in moziloCMS 1.10.2 and earlier that allows an attacker to hijack user sessions by supplying a PHPSESSID value. The connected documents corroborate the same description across NVD and CVE listings, confirming the affected product and the root caus...

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-3589

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

Directory traversal

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

CVE-2008-3589

The CVE-2008-3589 entry refers to a directory traversal in moziloCMS 1.10.1’s download.php, exploitable when magic_quotes_gpc is disabled. An attacker can read arbitrary files by injecting ".." into the cat parameter, enabling unintended file access. The vulnerability impacts moziloCMS version 1....

CVE-2008-3589

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

mozilocms-download.txt

!/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not very smart solution to keep it open no...

moziloCMS 1.10.1 - download.php Arbitrary Download File

moziloCMS 1.10.1 - download.php Arbitrary Download File !/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example,...

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

Exploit for unknown platform in category web applications =============================================================== moziloCMS 1.10.1 download.php Arbitrary Download File Exploit =============================================================== !/usr/bin/perl moziloCMS 1.10.1 Perl exploit...

moziloCMS 1.10.1 - 'download.php' Arbitrary Download File

!/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not very smart solution to keep it open no...