CVE:CVE-2009-1369
CNNVD:CNNVD-200904-435
moziloCMS 1.11版本允许远程攻击者借助(1)到gallery.php的gal[]参数，到index.php的(2)page[]和(3)cat[]参数或到download.php的(4)file[]参数，获得敏感信息。这些参数会在出错信息中显示安装路径。
solution:Upgrade mozilo mozilocms to a higher version than 1.11,and avoid the version 1.11