CVE-2009-1369

moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*

History

21 Nov 2024, 01:02

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/49811 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/49811 -
References () https://www.exploit-db.com/exploits/8394 - () https://www.exploit-db.com/exploits/8394 -

Information

Published : 2009-04-22 21:30

Updated : 2024-11-21 01:02


NVD link : CVE-2009-1369

Mitre link : CVE-2009-1369

CVE.ORG link : CVE-2009-1369


JSON object : View

Products Affected

mozilo

  • mozilocms
CWE
CWE-20

Improper Input Validation