CVE-2009-4209

 

Published at: - 04-12-2009 08:30

Last modified: - 24-09-2022 03:03

Total changes: - 2

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• 35212-Exploit
• 20090603 [InterN0T] moziloCMS 1.11.1 - XSS Vulnerability-

 

Keywords

NVD

 

CVE-2009-4209

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures