Zikula vulnerabilities

Products

• Application Framework 10
• Zikula 2

Newest

• ziku zikula Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the ... CVE-2011-3352 4.8 MediumNovember 19, 2019
• zikula application framework Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object... CVE-2014-2293 9.8 CriticalMarch 26, 2018
• zikula application framework Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x... CVE-2016-9835 9.8 CriticalDecember 5, 2016
• zikula application framework Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows... CVE-2013-6168 4.3 MediumNovember 14, 2013
• zikula application framework Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault... CVE-2011-3979 Public exploit 4.3 MediumOctober 4, 2011
• zikula Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3826 5.0 MediumSeptember 24, 2011
• zikula application framework Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote... CVE-2011-0911 4.3 MediumFebruary 8, 2011
• zikula application framework Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows... CVE-2011-0535 Public exploit 6.8 MediumFebruary 8, 2011
• zikula application framework Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form... CVE-2010-4729 6.8 MediumFebruary 8, 2011
• zikula application framework Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which... CVE-2010-4728 5.0 MediumFebruary 8, 2011
• zikula application framework Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application... CVE-2010-1732 6.8 MediumMay 5, 2010
• zikula application framework Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and... CVE-2010-1724 Public exploit 4.3 MediumMay 5, 2010