SQL Injection

tribalsystems/zenario is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization of the ID input field of ajax.php in the Pugin library - delete module...

GHSA-W4F3-7F7C-X652 SQL Injection in tribalsystems/zenario

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 and prior allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

CVE-2021-26830

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

CVE-2021-26830: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module...

PT-2021-17154

Name of the Vulnerable Software and Affected Versions: Tribalsystems Zenario CMS versions prior to 8.8.52729 Description: The issue allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of "ajax.php" in the Pugin library - delete module...