zikula zikula application framework 1.3.1 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Zikula Application Framework prior to 1.3.6 allows remote malicious users to inject arbitrary web script or HTML via the returnpage parameter to index.php.

Zikula Zikula Application Framework 1.3.2 Zikula Zikula Application Framework 1.3.1 Zikula Zikula Application Framework 1.3.0 Zikula Zikula Application Framework Zikula Zikula Application Framework 1.3.4 Zikula Zikula Application Framework 1.3.3

Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x prior to 1.3.11 and 1.4.x prior to 1.4.4 on Windows allows a remote malicious user to launch a PHP object injection by uploading a serialized file.

Zikula Zikula Application Framework 1.4.0 Zikula Zikula Application Framework 1.4.1 Zikula Zikula Application Framework 1.4.2 Zikula Zikula Application Framework 1.4.3 Zikula Zikula Application Framework 1.3.2 Zikula Zikula Application Framework 1.3.0 Zikula Zikula Application Framework 1.3.1 Zikula Zikula Application Framework 1.3.3 Zikula Zikula Application Framework 1.3.4 Zikula Zikula Application Framework 1.3.8 Zikula Zikula Application Framework 1.3.10 Zikula Zikula Application Framework 1.3.5 Zikula Zikula Application Framework 1.3.7 Zikula Zikula Application Framework 1.3.9 Zikula Zikula Application Framework 1.3.6

Zikula prior to 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote malicious users to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.

Zikula Zikula Application Framework 1.2.2 Zikula Zikula Application Framework 1.2.1 Zikula Zikula Application Framework 1.2.4 Zikula Zikula Application Framework 1.1.2 Zikula Zikula Application Framework 1.2.3 Zikula Zikula Application Framework

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook