CVE-2018-18420: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenariocontent%2Fpanels%2Fcontent URI...

PT-2018-14451

Name of the Vulnerable Software and Affected Versions Zenario Content Management System version 8.3 Description A Cross-Site Request Forgery CSRF issue was found in the Zenario Content Management System. The issue is related to the "admin/organizer.ajax.php?path=zenario content%2Fpanels%2Fcontent...

Zenario CMS SQL Injection

SQL Injection vulnerabilty in Zenario CMS X-FORWARDED-FOR header Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Zenario CMS File Disclosure

File disclosure vulnerability in Zenario CMS compressor.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Sql injection

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

CVE-2018-5960

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

CVE-2018-5960

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

CVE-2018-5960

CVE-2018-5960 affects Zenario versions 7.1–7.6. The vulnerability is a SQL injection through the Name input field in the Categories - Edit module, specifically in organizer.php or admin_boxes.ajax.php. The attack surface is the affected web UI fields, where user-controlled input can be used to in...

CVE-2018-5960

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

Zenario SQL Injection Vulnerability

Zenario is a web-based content management system for multilingual websites. A SQL injection vulnerability exists in Zenario versions 7.1 through 7.6. A remote attacker can exploit this vulnerability to execute malicious SQL commands with the help of the 'Name' input field in the organizer.php or...

PT-2018-17248

Name of the Vulnerable Software and Affected Versions: Zenario versions 7.1 through 7.6 Description: The issue concerns SQL injection via the Name input field in the Categories - Edit module, specifically affecting organizer.php or admin boxes.ajax.php. Recommendations: For Zenario versions 7.1...

CVE-2018-5960: Improper Neutralization of Special Elements used in an SQL Command

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or adminboxes.ajax.php in the Categories - Edit module...

Zenario v7.6 CMS - SQL Injection Web Vulnerability

Document Title: =============== Zenario v7.6 CMS - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2043 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date: ===========...

Zenario v7.6 CMS - SQL Injection Web Vulnerability

Document Title: =============== Zenario v7.6 CMS - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2043 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date: ===========...

Zenario CMS 7.6 SQL Injection

Document Title: =============== Zenario v7.6 CMS - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2043 Release Date: ============= 2018-01-16 Vulnerability Laboratory ID VL-ID: ==================================== 2043...

Zenario Cross-Site Scripting Vulnerability

Zenario is a web-based content management system and multilingual page software. A cross-site scripting vulnerability exists in Zenario version 7.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Zenario 7.6 Persistent Cross Site Scripting

Document Title: =============== Zenario v7.6 - Persistent Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2044 https://github.com/TribalSystems/Zenario/commit/cd60f1c8a179ebb779fe0acc051b93f477129b1a Release Date:...

Zenario 7.6 Cross Site Scripting

Document Title: =============== Zenario v7.6 - Delete Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2042 Release Date: ============= 2017-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Zenario v7.6 - (Delete) Persistent Cross Site Vulnerability

Document Title: =============== Zenario v7.6 - Delete Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2042 Release Date: ============= 2017-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Zenario v7.6 - (Delete) Persistent Cross Site Vulnerability

Document Title: =============== Zenario v7.6 - Delete Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2042 Release Date: ============= 2017-03-20 Vulnerability Laboratory ID VL-ID: ====================================...