ID de Prueba:	1.3.6.1.4.1.25623.1.0.803962
Categoría:	Web application abuses
Título:	Zikula returnpage Cross Site Scripting Vulnerability
Resumen:	Zikula is prone to a cross-site scripting (XSS) vulnerability.
Descripción:	Summary: Zikula is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: An error exists in the index.php script which fails to properly sanitize user-supplied input to 'returnpage' parameter. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary HTML script code in a user's browser session in the context of an affected site. Affected Software/OS: Zikula Application Framework version prior to 1.3.6 build 19. Solution: Upgrade to Zikula Application Framework version to 1.3.6 build 19 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6168 BugTraq ID: 63186 http://www.securityfocus.com/bid/63186 Bugtraq: 20131113 Cross-Site Scripting (XSS) in Zikula Application Framework (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-11/0057.html https://www.htbridge.com/advisory/HTB23178 XForce ISS Database: zikulaapplicationframework-unspecified-xss(88654) https://exchange.xforce.ibmcloud.com/vulnerabilities/88654
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.