CVE-2008-6127 | BDVDB-2026-34915 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/32021
http://www.securityfocus.com/bid/31495
http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog
http://www.majorsecurity.de/index_2.php?major_rls=major_rls55
https://exchange.xforce.ibmcloud.com/vulnerabilities/45525

Exploit#

No public exploit known

History#

Version 12009-02-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.