critical9.8
CVE-2016-9835
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP o…
Impact
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zikula | Zikula Application Framework | Versions 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95005
- https://github.com/zikula/core/blob/1.3/CHANGELOG-1.3.md
- https://github.com/zikula/core/blob/1.4/CHANGELOG-1.4.md
- https://github.com/zikula/core/issues/3237
- http://www.securityfocus.com/bid/95005
- https://github.com/zikula/core/blob/1.3/CHANGELOG-1.3.md
- https://github.com/zikula/core/blob/1.4/CHANGELOG-1.4.md
- https://github.com/zikula/core/issues/3237