tribalsystems/zenario

6 results · Clear filters · Feed

• Medium 5.4
  CVE-2023-44769 Public exploit

  Zenario CMS Cross-site Scripting vulnerability

  A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias.

  tribalsystems/zenario Packagist
  Oct 24, 2023
• Medium 5.4
  CVE-2023-44770 Public exploit

  Zenario CMS Cross-site Scripting vulnerability

  A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.

  tribalsystems/zenario Packagist
  Oct 6, 2023
• Medium 5.4
  CVE-2023-44771 Public exploit

  Zenario CMS Cross-site Scripting vulnerability

  A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout.

  tribalsystems/zenario Packagist
  Oct 6, 2023
• Critical 9.8
  CVE-2022-44136 Public exploit

  Zenario CMS is vulnerable to Remote Code Execution (RCE).

  Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

  tribalsystems/zenario Packagist
  Nov 30, 2022
• Critical 9.8
  CVE-2021-42171 Public exploit

  Unrestricted Upload of File with Dangerous Type in Zenario CMS

  Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and …

  tribalsystems/zenario Packagist
  Mar 14, 2022
• Critical 9.1
  CVE-2021-26830 Public exploit

  SQL Injection in tribalsystems/zenario

  SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.

  tribalsystems/zenario Packagist
  Apr 16, 2021