CVE-2008-6126: Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read...

Security readout for executives and security teams

CVE-2008-6126 is a directory traversal flaw in moziloCMS 1.10.2 and earlier. A remote attacker may read files the web server can access through vulnerable request parameters. Business impact depends on whether legacy moziloCMS is still internet-facing and whether sensitive configuration or content is readable. Exposure is most likely in legacy sites still running moziloCMS 1.10.2 or earlier, especially public websites retaining download.php or index.php routes. The provided CPE data is incomplete, so inventory should rely on application evidence rather than CPE matching alone. Treat this as a legacy web application exposure issue. It is not KEV-listed in the supplied bundle, but remote arbitrary file read can disclose credentials or sensitive content. Prioritize internet-facing legacy moziloCMS sites first. Mitigation focus: Identify any moziloCMS deployments and determine their exact version.; Check moziloCMS vendor guidance or changelog for the fixed release and upgrade path.; Retire or isolate unsupported moziloCMS instances if no maintained fix is available..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.