CVE-2008-6130

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-13 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters.

Affected products

Mozilowiki: through 1.0.1; 0.7, 0.8, 0.9, 0.10, 1.0.0

References

http://marc.info/?l=bugtraq&m=122278832621348&w=2
http://secunia.com/advisories/32024
http://wiki.mozilo.de/index.php?page=Changelog
http://www.majorsecurity.de/index_2.php?major_rls=major_rls56
http://www.securityfocus.com/bid/31493
https://exchange.xforce.ibmcloud.com/vulnerabilities/45527
http://marc.info/?l=bugtraq&m=122278832621348&w=2
http://secunia.com/advisories/32024
http://wiki.mozilo.de/index.php?page=Changelog
http://www.majorsecurity.de/index_2.php?major_rls=major_rls56
http://www.securityfocus.com/bid/31493
https://exchange.xforce.ibmcloud.com/vulnerabilities/45527

Get alerted when CVE-2008-6130 or the next vulnerability affects your stack