SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account.

Published Jun 19, 2017 · Updated Aug 5, 2024 · Assigned by mitre