CVE-2013-6168

Mô tả

Tham khảo

• archives.neohapsis.com/archives/bugtraq/2013-11/0057.html · Exploit
• community.zikula.org/index.php · Patch
• securityfocus.com/bid/63186
• exchange.xforce.ibmcloud.com/vulnerabilities/88654
• htbridge.com/advisory/HTB23178 · Exploit

Lỗ hổng khác của zikula application framework

• CVE-2014-2293NGHIÊM TRỌNG 9.8Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary file…
• CVE-2016-9835NGHIÊM TRỌNG 9.8Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacke…
• CVE-2011-3979TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application…
• CVE-2011-0911TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script o…
• CVE-2011-0535TRUNG BÌNH 6.8Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authenticat…