Lucene search

CVE-2021-27673

🗓️ 15 Apr 2021 14:16:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 73 Views🌐 WEB

"CVE-2021-27673 XSS in Tribal Systems Zenario CMS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	reflected XSS in tribalsystems/zenario	8 Jun 202120:11	–	osv
Packet Storm	Zenario CMS 8.8.52729 SQL Injection	11 Jun 202100:00	–	packetstorm
Cvelist	CVE-2021-27673	15 Apr 202113:51	–	cvelist
Prion	Cross site scripting	15 Apr 202114:15	–	prion
0day.today	Zenario CMS 8.8.52729 - (cID) Blind & Error based SQL injection (Authenticated) Vulnerability	11 Jun 202100:00	–	zdt
Github Security Blog	reflected XSS in tribalsystems/zenario	8 Jun 202120:11	–	github
NVD	CVE-2021-27673	15 Apr 202114:15	–	nvd
Exploit DB	Zenario CMS 8.8.52729 - 'cID' SQL injection (Authenticated)	11 Jun 202100:00	–	exploitdb

Nvd

Node

tribalsystems zenarioMatch8.8.52729

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html
deadsh0t	www.deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38

Parameter	Position	Path	Description	CWE
cID	query param	/zenario/admin.php	Cross Site Scripting (XSS) vulnerability through the 'cID' parameter in Zenario CMS.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Apr 2021 14:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS23.5

CVSS34.8

EPSS0.00739

CWE-79