Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MoziloMozilocms

4 matches found

CVE
CVE•added 2009/04/22 9:30 p.m.•40 views

CVE-2009-1367

Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a.

4.3CVSS5.6AI score0.01346EPSS
CVE
CVE•added 2009/12/04 7:30 p.m.•38 views

CVE-2009-4209

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367.

4.3CVSS5.7AI score0.01346EPSS
CVE
CVE•added 2008/08/11 11:41 p.m.•34 views

CVE-2008-3589

Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.

4.3CVSS6.6AI score0.01981EPSS
CVE
CVE•added 2009/02/13 6:30 p.m.•32 views

CVE-2008-6127

Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and th...

4.3CVSS5.8AI score0.00357EPSS