EUVD-2008-6100

Malware in sbrugna...

EUVD-2008-6099

Malware in sbrugna...

EUVD-2008-6101

Malware in sbrugna...

CVE-2008-6131

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6129

Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2008-6130

Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...

Session fixation

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6129

Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

CVE-2008-6131

This CVE affects moziloWiki 1.0.1 and earlier, where a flaw in session handling allows remote attackers to hijack sessions by supplying a PHPSESSID parameter. The underlying issue is a session fixation vulnerability that can enable user session takeover. No explicit remediation or patch details a...

CVE-2008-6130

The CVE-2008-6130 entry identifies a cross-site scripting (XSS) vulnerability in moziloWiki 1.0.1 and earlier, exploitable via index.php. The root cause is unsanitized input in the (1) action and (2) page parameters, enabling remote attackers to inject arbitrary web script or HTML. Affected softw...

CVE-2008-6131

Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

CVE-2008-6130

Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...

CVE-2008-6129

CVE-2008-6129 affects moziloWiki 1.0.1 and earlier. A directory-traversal in print.php allows remote attackers to read arbitrary files by providing .. in the page parameter. The NVD entry lists a MEDIUM base score (4.3) with network attack vector and partial confidentiality impact, but exploitati...

[MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues

MajorSecurity Advisory 56moziloWiki - Directory Traversal, XSS and SessionFixation Issues Details ======= Product: moziloWiki Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

major_rls56.txt

MajorSecurity Advisory 56moziloWiki - Directory Traversal, XSS and SessionFixation Issues Details ======= Product: moziloWiki Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...