CVE-2010-1724

概要

参考情報

• community.zikula.org/index.php · Vendor Advisory
• osvdb.org/64096
• secunia.com/advisories/39614 · Vendor Advisory
• htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework.html
• htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework_1.html
• osvdb.org/64095
• securityfocus.com/archive/1/510988/100/0/threaded
• securityfocus.com/bid/39717
• exchange.xforce.ibmcloud.com/vulnerabilities/58224

zikula application framework のその他の脆弱性

• CVE-2014-2293緊急 9.8Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary file…
• CVE-2016-9835緊急 9.8Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacke…
• CVE-2013-6168中 4.3Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script…
• CVE-2011-3979中 4.3Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application…
• CVE-2011-0911中 4.3Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script o…