Description

Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file.

Remediation

References

CVE-2016-9835

Related Vulnerabilities

WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.3)

WordPress Plugin Easy Digital Downloads-Recent Purchases Remote File Inclusion (1.0.2)

WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.6.5)

WordPress Plugin WordPress Landing Pages SQL Injection (1.2.1)

Plone CMS CVE-2012-5503 Vulnerability (CVE-2012-5503)

Severity

Critical

Classification

CVE-2016-9835 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities