Zenar Content Management System 8.3 Cross Site Request Forgery

Exploit Title: Zenar Content Management System 8.3 - Cross-Site Request Forgery CSRF Date: 2018-05-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://zenar.io/ Software Link : https://github.com/TribalSystems/Zenario/releases/tag/8.3.47997 Software : Zenar Content Management System 8.3...

tribal-shop.ch XSS vulnerability

Open Bug Bounty ID: OBB-600506 Description| Value ---|--- Affected Website:| tribal-shop.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tribal Rivals - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Tribal Rivals published at the 'play' market has multiple vulnerabilities...

Tribal Wars 2 - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Tribal Wars 2 published at the 'play' market has multiple vulnerabilities...

Tribal Wars - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Tribal Wars published at the 'play' market has multiple vulnerabilities...

Zenario CMS 7.0.7c Remote Code Execution

Zenario CMS 7.0.7c Remote Code Execution Vulnerability Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: = 7.0.7c and 7.1.0 svn Summary: Zenario is a web-based content management system for sites with one or many languages. It's designed to grow with your site, adding...

Zenario CMS 7.0.7c Remote Code Execution Vulnerability

Zenario CMS versions 7.0.7c and 7.1.0 and below suffer from a remote code execution vulnerability. Zenario CMS 7.0.7c Remote Code Execution Vulnerability Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: = 7.0.7c and 7.1.0 svn Summary: Zenario is a web-based content...

Zenario CMS 7.0.7c Remote Code Execution Vulnerability

Summary Zenario is a web-based content management system for sites with one or many languages. It's designed to grow with your site, adding extranet, online database and custom functionality when you need it. Description The vulnerability is caused due to the improper verification of uploaded fil...

Tribal Tribiq CMS Path Disclosure Vulnerability

Tribal Tribiq CMS is a content management CMS system. A security vulnerability exists in the templatewrap/templatefoot.php, cmsjs/plugin.js.php, and cmsincludes/cmspluginapilink.inc.php scripts of Tribal Tribiq CMS version 5.2.7b and earlier. A remote attacker could exploit the vulnerability by...

CVE-2011-2727

The 1 templatewrap/templatefoot.php, 2 cmsjs/plugin.js.php, and 3 cmsincludes/cmspluginapilink.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...

CVE-2011-2727

Tribiq CMS is affected: Tribal Tribiq CMS versions before 5.2.7c (also cited as 5.2.7b and earlier) expose a information-disclosure flaw in templatewrap/templatefoot.php, cmsjs/plugin.js.php, and cmsincludes/cms_plugin_api_link.inc.php. A remote attacker can trigger a direct request to these scri...

CVE-2011-2727

The 1 templatewrap/templatefoot.php, 2 cmsjs/plugin.js.php, and 3 cmsincludes/cmspluginapilink.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...

Zenario CMS 7.0.2d Cross Site Scripting / Open Redirect

Zenario CMS 7.0.2d Reflected XSS and Open Redirect Vulnerabilities Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: 7.0.2d Community Edition Summary: Zenario is a web-based content management system for sites with one or many languages. It is simple to use, and can grow...

Zenario CMS 7.0.2d Reflected XSS and Open Redirect Vulnerabilities

Summary Zenario is a web-based content management system for sites with one or many languages. It is simple to use, and can grow with your requirements. Description Input passed via the 'location' GET parameter in 'index.php' script is not properly verified before being used to redirect users. Th...

CVE-2009-2220

CVE-2009-2220 describes multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c—triggered when register_globals is enabled and magic_quotes_gpc is disabled—that allow remote inclusion/execution of arbitrary files via template_path in masthead.inc.php, toppanel.inc.php, contact.inc.php,...