Improper input validation in Mozilo Mozilocms

CVE-2009-1369

moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation pat…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.