CVE-2008-6127
published 2009-02-13CVE-2008-6127: Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)…
PriorityP413medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.06%
60.5th percentile
Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilo | mozilocms | <= 1.10.2 | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
| mozilo | mozilocms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-89xj-h8qr-5hmm: Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1
ghsa_unreviewed·2022-05-17
CVE-2008-6127 [MEDIUM] CWE-79 GHSA-89xj-h8qr-5hmm: Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1
Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.
GHSA
GHSA-5qjp-39q7-2p9v: Cross-site scripting (XSS) vulnerability in index
ghsa_unreviewed·2022-05-02·CVSS 4.3
CVE-2009-1367 [MEDIUM] CWE-79 GHSA-5qjp-39q7-2p9v: Cross-site scripting (XSS) vulnerability in index
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a.
GHSA
GHSA-mf85-2mg4-mv8g: Multiple cross-site scripting (XSS) vulnerabilities in admin/index
ghsa_unreviewed·2022-05-02·CVSS 4.3
CVE-2009-4209 [MEDIUM] CWE-79 GHSA-mf85-2mg4-mv8g: Multiple cross-site scripting (XSS) vulnerabilities in admin/index
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changeloghttp://secunia.com/advisories/32021http://www.majorsecurity.de/index_2.php?major_rls=major_rls55http://www.securityfocus.com/bid/31495https://exchange.xforce.ibmcloud.com/vulnerabilities/45525http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changeloghttp://secunia.com/advisories/32021http://www.majorsecurity.de/index_2.php?major_rls=major_rls55http://www.securityfocus.com/bid/31495https://exchange.xforce.ibmcloud.com/vulnerabilities/45525
2009-02-13
Published