Skip to content
Noroxi

mozilo records

17 published records for vendor mozilo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
5.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2022-23357
    42Plan

    mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.

    CriticalCVSS 9.1No exploitEPSS 20%

    mozilo · mozilocmsFeb 2, 2022

  • CVE-2024-44871
    33Monitor

    An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via up

    HighCVSS 7.2Proof of conceptEPSS 16%

    mozilo · mozilocmsSep 10, 2024

  • CVE-2009-1368
    32Monitor

    Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a ..

    HighCVSS 7.5Proof of conceptEPSS 6%

    mozilo · mozilocmsApr 22, 2009

  • CVE-2008-6128
    27Monitor

    Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID param

    MediumCVSS 6.8No exploitEPSS 1%

    mozilo · mozilocmsFeb 13, 2009

  • CVE-2024-29368
    26Monitor

    An arbitrary file upload vulnerability in the file handling module of moziloCMS v2.0 allows attackers to bypass extension restrictions via f

    MediumCVSS 6.5No exploitEPSS 1%

    mozilo · mozilocmsApr 22, 2024

  • CVE-2008-6131
    24Monitor

    Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID param

    MediumCVSS 6.0No exploitEPSS 1%

    mozilo · mozilowikiFeb 13, 2009

  • CVE-2024-44872
    24Monitor

    A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's

    MediumCVSS 6.1No exploitEPSS 0%

    mozilo · mozilocmsSep 10, 2024

  • CVE-2024-2245
    24Monitor

    Cross-Site Scripting vulnerability in moziloCMS

    MediumCVSS 6.1No exploitEPSS 0%

    mozilo · mozilocmsMar 7, 2024

  • CVE-2008-6126
    21Monitor

    Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 3%

    mozilo · mozilocmsFeb 13, 2009

  • CVE-2009-1369
    21Monitor

    moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[]

    MediumCVSS 5.0Proof of conceptEPSS 2%

    mozilo · mozilocmsApr 22, 2009

  • CVE-2020-25394
    21Monitor

    A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML v

    MediumCVSS 5.4No exploitEPSS 0%

    mozilo · mozilocmsJul 9, 2021

  • CVE-2008-3589
    18Monitor

    Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read ar

    MediumCVSS 4.3Proof of conceptEPSS 2%

    mozilo · mozilocmsAug 11, 2008

  • CVE-2008-6129
    17Monitor

    Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a ..

    MediumCVSS 4.3No exploitEPSS 2%

    mozilo · mozilowikiFeb 13, 2009

  • CVE-2009-1367
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.3Proof of conceptEPSS 1%

    mozilo · mozilocmsApr 22, 2009

  • CVE-2008-6130
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script

    MediumCVSS 4.3No exploitEPSS 1%

    mozilo · mozilowikiFeb 13, 2009

  • CVE-2009-4209
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web sc

    MediumCVSS 4.3Proof of conceptEPSS 1%

    mozilo · mozilocmsDec 4, 2009

  • CVE-2008-6127
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or

    MediumCVSS 4.3No exploitEPSS 1%

    mozilo · mozilocmsFeb 13, 2009