CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3은 파일 관리 모듈에서 ​​무제한 파일 업로드 취약점​​이 존재합니다. 이로 인해 인증된 공격자최소 권한을 가진가 악성 PHP 스크립트를 포함한 임의의 파일을 웹 서버에 업로드할 수 있습니다. 파일 확장자 검증 부족 및 적절한 정화sanitization 부족으로 인해, 공격자는 조작된 페이로드예: 웹 셸를 업로드하고 웹 루트를 통해 접근하여 대상 시스템에서 임의의 코드를 실행할 수 있습니다...

CVE-2018-25331

CVE-2018-25331 affects Zenar Content Management System. The vulnerability is a Cross-Site Scripting (XSS) in the ajax.php endpoint, where unsanitized user input is reflected in the response. Exploitation is possible via POST parameters (notably the current_page parameter), enabling unauthenticate...

CVE-2018-25331

Zenar Content Management System contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating form parameters in POST requests. Attackers can inject script tags through the currentpage parameter sent to the ajax.php endpoint, which...

Zenar Content Management System 跨站脚本漏洞

Zenar Content Management System is an open source content management system CMS from the Zenar team. A cross-site scripting vulnerability exists in the Macrob7 Macs Framework Content Management System, which stems from a cross-site scripting XSS vulnerability contained in the account reset featur...

Zenar Content Management System 8.3 Cross Site Request Forgery

Exploit Title: Zenar Content Management System 8.3 - Cross-Site Request Forgery CSRF Date: 2018-05-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://zenar.io/ Software Link : https://github.com/TribalSystems/Zenario/releases/tag/8.3.47997 Software : Zenar Content Management System 8.3...

Zenar Content Management System - Cross-Site Scripting

Exploit Title: Zenar Content Management System - Cross-Site Scripting Software Link: https://zenar.io/ Dork: N/A Author: Berk Dusunur Tested Website: http://demo.zenar.io Date: 2018-05-20 Category: Web App PoC GET Request: POST /zenario/ajax.php?methodcall=refreshPlugin&inIframe=true HTTP/1.1 Hos...