Zikula Application Framework vulnerabilities

• zikula application framework Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object... CVE-2014-2293 9.8 CriticalMarch 26, 2018
• zikula application framework Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x... CVE-2016-9835 9.8 CriticalDecember 5, 2016
• zikula application framework Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows... CVE-2013-6168 4.3 MediumNovember 14, 2013
• zikula application framework Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault... CVE-2011-3979 Public exploit 4.3 MediumOctober 4, 2011
• zikula application framework Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote... CVE-2011-0911 4.3 MediumFebruary 8, 2011
• zikula application framework Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows... CVE-2011-0535 Public exploit 6.8 MediumFebruary 8, 2011
• zikula application framework Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form... CVE-2010-4729 6.8 MediumFebruary 8, 2011
• zikula application framework Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which... CVE-2010-4728 5.0 MediumFebruary 8, 2011
• zikula application framework Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application... CVE-2010-1732 6.8 MediumMay 5, 2010
• zikula application framework Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and... CVE-2010-1724 Public exploit 4.3 MediumMay 5, 2010