CVE-2026-121514

A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack i...

EUVD-2026-116371

A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack i...

CVE-2026-121514

A weakness exists in EasySoft ZenTao PMS (up to version 22.6) within the User Module component. Specifically, the function userModel::checkGroupChange in the file module/user/model.php is susceptible to manipulation of the argument group, leading to improper privilege management . This vulnerabil...

CVE-2026-121514 EasySoft ZenTao PMS User model.php checkGroupChange privileges management

A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack i...

EUVD-2020-14041

Malware in sbrugna...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

Cross site scripting

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

The CVE-2020-21268 entry concerns EasySoft ZenTao v11.6.4 with a Cross Site Scripting vulnerability in the lastComment parameter that can enable a remote attacker to execute arbitrary code. Affected component: ZenTao/lastComment handling. Root cause details are not explicitly provided in the conn...