Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Jun 16, 2026
CVE-2008-6127
CVE-2008-6127
Description
Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php.
Affected products
21cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*range: <=1.10.2
- cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*
- (no CPE)range: <=1.10.2
Patches
Vulnerability mechanics
References
5- cms.mozilo.de/index.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/31495nvdPatch
- secunia.com/advisories/32021nvdVendor Advisory
- www.majorsecurity.de/index_2.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/45525nvd
News mentions
0No linked articles in our index yet.