Zikula Application Framework@1.3.0 Security Vulnerabilities and Issues — Zikula Application Framework@1.3.0 CVE List

Lucene search

ZikulaZikula Application Framework1.3.0

3 matches found

CVE•added 2011/10/04 10:55 a.m.•44 views

CVE-2011-3979

Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application Framework 1.3.0 build 3168, 1.2.7, and probably other versions allows remote attackers to inject arbitrary web script or HTML via the themename parameter in t...

4.3CVSS5.8AI score0.14741EPSS

CVE•added 2013/11/14 8:55 p.m.•38 views

CVE-2013-6168

Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php.

4.3CVSS5.7AI score0.0034EPSS

CVE•added 2016/12/05 8:59 a.m.•29 views

CVE-2016-9835

Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file.

9.8CVSS9.5AI score0.03905EPSS