Podatność CVE-2011-0535

Podatność CVE-2011-0535

Publikacja: 2011-02-08 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
Med.	Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability	YGN Ethical Hac...	10.02.2011

Typ:

(Cross-Site Request Forgery (CSRF))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
6.8/10	6.4/10	8.6/10

Affected software
Zikula -> Zikula application framework

http://www.osvdb.org/70751

http://securityreason.com/securityalert/8067

http://secunia.com/advisories/43114

http://seclists.org/fulldisclosure/2011/Feb/0

http://openwall.com/lists/oss-security/2011/02/03/1

http://openwall.com/lists/oss-security/2011/02/01/1

http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released

http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG

http://bl0g.yehg.net/2011/02/zikula-cms-124-cross-site-request.html