5 matches found
Zikula - jcss.php Path Traversal Detection (CVE-2016-9835)
Detects CVE-2016-9835 by requesting jcss.php?f=......\jcss.php and matching ERROR: Corrupted file without Requested file not readable. !/usr/bin/env python3 -- coding: utf-8 -- """Zikula jcss.php directory traversal CVE-2016-9835.""" from kittysploit import from lib.protocols.http.httpclient...
Directory traversal
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
CVE-2016-9835
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
CVE-2016-9835: Improper Neutralization of Special Elements used in a Command
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
PT-2016-7835
Name of the Vulnerable Software and Affected Versions Zikula versions 1.3.x through 1.3.10 Zikula versions 1.4.x through 1.4.3 Description A directory traversal issue in the file "jcss.php" allows a remote attacker to launch a PHP object injection by uploading a serialized file. Recommendations F...