Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MoziloMozilocms1.10.1

4 matches found

CVE
CVE•added 2009/02/13 6:30 p.m.•40 views

CVE-2008-6128

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

6.8CVSS6.9AI score0.00536EPSS
CVE
CVE•added 2008/08/11 11:41 p.m.•34 views

CVE-2008-3589

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.

4.3CVSS6.6AI score0.01981EPSS
CVE
CVE•added 2009/02/13 6:30 p.m.•32 views

CVE-2008-6126

Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to download.php and the (2) page parameter to index.php, a different vector than CVE-2008-3589.

5CVSS6.8AI score0.01981EPSS
CVE
CVE•added 2009/02/13 6:30 p.m.•32 views

CVE-2008-6127

Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and th...

4.3CVSS5.8AI score0.00357EPSS