ID de Prueba:	1.3.6.1.4.1.25623.1.0.801732
Categoría:	Web application abuses
Título:	Zikula CMS CSRF Vulnerability
Resumen:	Zikula is prone to a cross-site request forgery vulnerability.
Descripción:	Summary: Zikula is prone to a cross-site request forgery vulnerability. Vulnerability Insight: The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions for majority of administrator functions such as adding new user, assigning user to administrative privilege. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary commands in the context of the affected site. Affected Software/OS: Zikula version 1.2.4 and prior. Solution: Upgrade to the Zikula version 1.2.5. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0535 20110201 Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability http://seclists.org/fulldisclosure/2011/Feb/0 43114 http://secunia.com/advisories/43114 70751 http://www.osvdb.org/70751 8067 http://securityreason.com/securityalert/8067 [oss-security] 20110201 CVE Request: Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability http://openwall.com/lists/oss-security/2011/02/01/1 [oss-security] 20110203 Re: CVE Request: Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability http://openwall.com/lists/oss-security/2011/02/03/1 http://bl0g.yehg.net/2011/02/zikula-cms-124-cross-site-request.html http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released Common Vulnerability Exposure (CVE) ID: CVE-2011-0911
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.