Zikula Application Framework
Approved changes feed: RSS · Atom
cpe:2.3:a:zikula:zikula_application_framework:1.2.2:*:*:*:*:*:*:*part: a version: 1.2.2 update: *
| Vendor | Zikula (4e830270-8019-5b72-bb6a-e3548bb74f96) |
|---|---|
| Product | Zikula Application Framework (a023f0b4-0eb1-5414-b357-a82a9c480566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zikula/core |
purl2cpe | 2026-06-01 10:12:20.501724 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0911 |
vulnerable | 2026-06-08 04:56:40.181667 |
Details available
Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-09-16T19:40:10.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0535 |
vulnerable | 2026-06-08 04:56:37.728291 |
Details available
Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to index.php.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-08-06T21:58:25.421Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4728 |
vulnerable | 2026-06-08 04:56:30.542471 |
Details available
Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.
Published: 2011-02-08T21:00:00.000Z
Updated: 2024-09-17T03:43:12.558Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1724 |
vulnerable | 2026-06-08 04:54:10.035872 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not properly handled by ZLanguage.php.
Published: 2010-05-05T14:00:00.000Z
Updated: 2024-08-07T01:35:53.512Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.