CVE-2011-3979

Mô tả

Tham khảo

• community.zikula.org/index.php · Patch
• osvdb.org/75226
• secunia.com/advisories/45884 · Vendor Advisory
• securityreason.com/securityalert/8409
• securityfocus.com/archive/1/519565/100/0/threaded
• securityfocus.com/bid/49491 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/69644
• htbridge.ch/advisory/xss_in_zikula.html · Exploit

Lỗ hổng khác của zikula application framework

• CVE-2014-2293NGHIÊM TRỌNG 9.8Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary file…
• CVE-2016-9835NGHIÊM TRỌNG 9.8Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacke…
• CVE-2013-6168TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script…
• CVE-2011-0911TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script o…
• CVE-2011-0535TRUNG BÌNH 6.8Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authenticat…