SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2014-2293

CRITICAL · CVSS 9.8 EPSS 4.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-26 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2014-2293
Severity
CRITICAL
CVSS
9.8
EPSS
4.76%

Original NVD Description

Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitrary PHP code via crafted serialized data in the (1) authentication_method_ser or (2) authentication_info_ser parameter to index.php, or (3) zikulaMobileTheme parameter to index.php.