CVE-2009-1369

moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-04-22 21:30

Updated : 2024-02-28 11:21


NVD link : CVE-2009-1369

Mitre link : CVE-2009-1369

CVE.ORG link : CVE-2009-1369


JSON object : View

Products Affected

mozilo

  • mozilocms
CWE
CWE-20

Improper Input Validation