Read the docs

Zikula

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Zikula records in CISA KEV

No Zikula vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zikula Application Framework 10 records MEDIUM Zikula 1 record LOW

Records

1 record in Zikula · all components

TI-2011-03383 CVE-2011-3826 · GHSA-r9wq-5g27-54hm

Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request…

Priority LOW 25

Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/voodoodolly/version.php and cer…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01229 Published 2011-09-24 No fix listed CWE-200
Open these records in search →