sec-fortress/Exploits

Releases0

Stars3

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-44871 ↗	Sep 10, 2024Tuesday, 10 September 2024, 17:15	7.2 HIGH	—
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2024-44872 ↗	Sep 10, 2024Tuesday, 10 September 2024, 17:15	6.1 MEDIUM	—
A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.