PT-2021-17598

Name of the Vulnerable Software and Affected Versions Zenario CMS version 8.8.52729 Description The issue allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the cID parameter when creating a new HTML component in the "admin boxes.ajax.php" component. This is a case...

PT-2021-17597

Name of the Vulnerable Software and Affected Versions Zenario CMS version 8.8.52729 Description The issue allows remote attackers to obtain sensitive database information by injecting SQL commands into the cID parameter when creating a new HTML component in the "admin boxes.ajax.php" component...

PT-2018-17248

Name of the Vulnerable Software and Affected Versions: Zenario versions 7.1 through 7.6 Description: The issue concerns SQL injection via the Name input field in the Categories - Edit module, specifically affecting organizer.php or admin boxes.ajax.php. Recommendations: For Zenario versions 7.1...