CVE

Id
44308  
CVE No.
CVE-2010-1724  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not properly handled by ZLanguage.php.  
Phase
Assigned (20100505)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
483023 44308 CVE-2010-1724 BUGTRAQ:20100427 XSS vulnerability in Zikula Application Framework  View
483024 44308 CVE-2010-1724 URL:http://www.securityfocus.com/archive/1/archive/1/510988/100/0/threaded  View
483025 44308 CVE-2010-1724 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework.html  View
483026 44308 CVE-2010-1724 MISC:http://www.htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework_1.html  View
483027 44308 CVE-2010-1724 CONFIRM:http://community.zikula.org/index.php?module=News&func=display&sid=3012&title=zikula-1.2.3-release-announcement  View
483028 44308 CVE-2010-1724 BID:39717  View
483029 44308 CVE-2010-1724 URL:http://www.securityfocus.com/bid/39717  View
483030 44308 CVE-2010-1724 OSVDB:64095  View
483031 44308 CVE-2010-1724 URL:http://www.osvdb.org/64095  View
483032 44308 CVE-2010-1724 OSVDB:64096  View
483033 44308 CVE-2010-1724 URL:http://osvdb.org/64096  View
483034 44308 CVE-2010-1724 SECUNIA:39614  View
483035 44308 CVE-2010-1724 URL:http://secunia.com/advisories/39614  View
483036 44308 CVE-2010-1724 XF:zikula-index-xss(58224)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36253 JVNDB-2010-002033 Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼働する Opera には、非同期的に発生する一連のドキュメント変更を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1728 44308 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002033.html  View