Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-2293
HistoryMar 26, 2018 - 6:29 p.m.

Design/Logic Flaw

2018-03-2618:29:00
PRIOn knowledge base
www.prio-n.com
2

8.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitrary PHP code via crafted serialized data in the (1) authentication_method_ser or (2) authentication_info_ser parameter to index.php, or (3) zikulaMobileTheme parameter to index.php.

CPENameOperatorVersion
zikula_application_frameworkle1.3.6

8.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.0%

Related for PRION:CVE-2014-2293