CVE-2008-6127

 

Published at: - 13-02-2009 07:30

Last modified: - 24-09-2022 03:03

Total changes: - 2

Description

Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• 31495-Patch
• 32021-Vendor Advisory
• http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog
• http://www.majorsecurity.de/index_2.php?major_rls=major_rls55
• mozilocms-index-xss(45525)-

 

Keywords

NVD

 

CVE-2008-6127

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures