CVE-2013-6168

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2013-11/0057.html · Exploit
• community.zikula.org/index.php · Patch
• securityfocus.com/bid/63186
• exchange.xforce.ibmcloud.com/vulnerabilities/88654
• htbridge.com/advisory/HTB23178 · Exploit

zikula application framework のその他の脆弱性

• CVE-2014-2293緊急 9.8Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary file…
• CVE-2016-9835緊急 9.8Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacke…
• CVE-2011-3979中 4.3Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application…
• CVE-2011-0911中 4.3Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script o…
• CVE-2011-0535中 6.8Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authenticat…