Vulnerabilities > Mozilo

DATE CVE VULNERABILITY TITLE RISK
2009-02-13 CVE-2008-6129 Path Traversal vulnerability in Mozilo Mozilowiki
Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a ..
network
mozilo CWE-22
4.3
2009-02-13 CVE-2008-6128 Improper Authentication vulnerability in Mozilo Mozilocms
Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
network
mozilo CWE-287
6.8
2009-02-13 CVE-2008-6127 Cross-Site Scripting vulnerability in Mozilo Mozilocms
Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.
network
mozilo CWE-79
4.3
2009-02-13 CVE-2008-6126 Path Traversal vulnerability in Mozilo Mozilocms
Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a ..
network
low complexity
mozilo CWE-22
5.0
2008-08-11 CVE-2008-3589 Path Traversal vulnerability in Mozilo Mozilocms 1.10.1
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..
network
mozilo CWE-22
4.3