Lucene search

K
osvGoogleOSV:GHSA-GXCM-36QW-J29V
HistoryJun 08, 2021 - 8:12 p.m.

SQL Injection in tribalsystems/zenario

2021-06-0820:12:02
Google
osv.dev
14
sql injection
tribal systems
zenario cms
remote attackers
sensitive database information
html component

EPSS

0.001

Percentile

42.2%

SQL Injection in the “admin_boxes.ajax.php” component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the “cID” parameter when creating a new HTML component.

EPSS

0.001

Percentile

42.2%

Related for OSV:GHSA-GXCM-36QW-J29V