Lucene search
+L

297 matches found

Vulnrichment
Vulnrichment
added 2022/11/16 12:00 a.m.7 views

CVE-2022-44071

Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting XSS via profile...

6AI score0.00447EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/11/16 12:00 a.m.27 views

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

5.5AI score0.00447EPSS
SaveExploits1References1
CVE
CVE
added 2022/11/16 12:00 a.m.92 views

CVE-2022-44073

CVE-2022-44073 affects Zenario CMS 9.3.57186. The vulnerability is an XSS in the SVG handling within the Users & Contacts area. The available sources consistently describe Cross-Site Scripting via SVG in that module, with a CVSS v3.1 base score of 5.4 (MEDIUM), indicating a client-side script exe...

5.4CVSS5.2AI score0.00447EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/11/16 12:00 a.m.78 views

CVE-2022-44069

CVE-2022-44069 affects Zenario CMS 9.3.57186, with XSS via the Nest library module. The root cause is likely improper handling of input within the Nest module, enabling cross-site scripting. Impact: Low in confidentiality and integrity, with user interaction required; no Availability impact docum...

5.4CVSS5.2AI score0.00447EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/11/03 12:00 p.m.70 views

GHSA-F92P-F8R2-C87Q Tribal Systems Zenario CMS vulnerable to Cross-site Scripting

A vulnerability has been found in Tribal Systems Zenario CMS prior to version 8.5.51340. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS4.6AI score0.00413EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/11/03 12:00 p.m.21 views

Tribal Systems Zenario CMS vulnerable to Cross-site Scripting

A vulnerability has been found in Tribal Systems Zenario CMS prior to version 8.5.51340. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS5.9AI score0.00413EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/11/02 7:15 p.m.30 views

CVE-2020-36608

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

6.1CVSS6AI score
SaveExploits0References2
NVD
NVD
added 2022/11/02 7:15 p.m.42 views

CVE-2020-36608

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

6.1CVSS0.00413EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/02 7:15 p.m.24 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

5.8CVSS6AI score0.00413EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/02 12:00 a.m.13 views

Zenario CMS 跨站脚本漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system. A security vulnerability exists in Zenario CMS that stems from some unknown functionality in adminorganizer.js of the Error Log module , which can lead to cross-site scripting...

6.1CVSS5.5AI score0.00413EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/11/02 12:00 a.m.9 views

PT-2022-9010 · Tribal Systems · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Tribal Systems Zenario CMS versions prior to 8.5.51340 Description: A vulnerability has been found in the Error Log Module of the Tribal Systems Zenario CMS, specifically in the file admin organizer.js. This issue leads to cross-site scriptin...

6.1CVSS5.9AI score0.00413EPSS
SaveExploits0References7
CVE
CVE
added 2022/11/02 12:00 a.m.80 views

CVE-2020-36608

Tribal Systems Zenario CMS is affected by CVE-2020-36608 in the Error Log Module, specifically the admin_organizer.js component. The issue is described as a cross-site scripting vulnerability that can be triggered remotely through unknown functionality within that file. A patch is identified by t...

6.1CVSS4.7AI score0.00413EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/02 12:00 a.m.46 views

CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

3.5CVSS6AI score0.00413EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/02 12:00 a.m.6 views

CVE-2020-36608 Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file adminorganizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched...

3.5CVSS4.1AI score0.00413EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/24 5:07 p.m.22 views

GHSA-5957-5CRX-79JX Zenario CMS vulnerable to CRLF injection

CRLF injection vulnerability in Zend\Mail ZendMail in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email...

6.1CVSS6.4AI score0.01009EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/05/24 5:07 p.m.25 views

Zenario CMS vulnerable to CRLF injection

CRLF injection vulnerability in Zend\Mail ZendMail in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email...

6.1CVSS7.4AI score0.01009EPSS
SaveExploits1References6Affected Software3
OSV
OSV
added 2022/05/14 1:53 a.m.19 views

GHSA-22CQ-XXR9-JRRV Zenario CMS vulnerable to CSRF

Cross-Site Request Forgery CSRF vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenariocontent%2Fpanels%2Fcontent URI...

8.8CVSS8.8AI score0.00821EPSS
SaveExploits2References2
Github Security Blog
Github Security Blog
added 2022/05/14 1:53 a.m.36 views

Zenario CMS vulnerable to CSRF

Cross-Site Request Forgery CSRF vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenariocontent%2Fpanels%2Fcontent URI...

8.8CVSS6.9AI score0.00821EPSS
SaveExploits2References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:28 a.m.29 views

SQL Injection in Zenario 7.1-7.6

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

8.8CVSS8.1AI score0.00934EPSS
SaveExploits4References3Affected Software1
OSV
OSV
added 2022/05/13 1:28 a.m.43 views

GHSA-JF5F-H3WR-J666 SQL Injection in Zenario 7.1-7.6

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

8.8CVSS9.1AI score0.00934EPSS
SaveExploits4References2
Rows per page
Query Builder