Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2024-44872
Disclosure Date: September 10, 2024 (last updated September 14, 2024)
A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
0
Attacker Value
Unknown
CVE-2024-44871
Disclosure Date: September 10, 2024 (last updated September 14, 2024)
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
0
Attacker Value
Unknown
CVE-2022-23357
Disclosure Date: February 03, 2022 (last updated February 23, 2025)
mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
0
Attacker Value
Unknown
CVE-2020-25394
Disclosure Date: July 09, 2021 (last updated February 23, 2025)
A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Content" parameter.
0
Attacker Value
Unknown
CVE-2009-4209
Disclosure Date: December 04, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367.
0
Attacker Value
Unknown
CVE-2009-1367
Disclosure Date: April 22, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a.
0
Attacker Value
Unknown
CVE-2009-1369
Disclosure Date: April 22, 2009 (last updated October 04, 2023)
moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2009-1368
Disclosure Date: April 22, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3.
0
Attacker Value
Unknown
CVE-2008-6127
Disclosure Date: February 13, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.
0
Attacker Value
Unknown
CVE-2008-6126
Disclosure Date: February 13, 2009 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to download.php and the (2) page parameter to index.php, a different vector than CVE-2008-3589.
0
