CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

EUVD-2017-18689

Malware in sbrugna...

EUVD-2016-1735

Malware in sbrugna...

Castlamp Zenbership Cross-Site Request Forgery Vulnerability

Castlamp Zenbership is an open source and free membership CRM software from Castlamp USA. The software is capable of providing a specialized customer relationship management system for membership sites. A cross-site request forgery vulnerability exists in Castlamp Zenbership version 107, which ca...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

Design/Logic Flaw

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 is affected by a CSRF vulnerability located at admin/cp-functions/event-add.php. The description explicitly states CSRF via that endpoint, indicating potential unauthorized operations could be triggered by attackers. No concrete patch/version remediation details are provided in th...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738: Cross-Site Request Forgery (CSRF)

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

PT-2019-7537

Name of the Vulnerable Software and Affected Versions Zenbership version 1.07 Description The issue allows for CSRF via the "admin/cp-functions/event-add.php" API endpoint. Recommendations For Zenbership version 1.07, update to a version that includes a fix for this issue, or as a temporary...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

Sql injection

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

The vulnerability is a SQL Injection in the open-source CMS Zenbership version 1.0.8, located in the admin/index.php handling the filters array parameter. The issue is exploitable by a privileged account, as described in CVE-2017-9759. The connected sources consistently report this exact flaw but...

CVE-2017-9759: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

PT-2017-19166

Name of the Vulnerable Software and Affected Versions Zenbership version 1.0.8 Description A SQL Injection issue exists in the admin/index.php file of Zenbership, specifically via the filters array parameter. This issue can be exploited by an attacker with a privileged account. Recommendations Fo...

Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities

Zenbership is vulnerable to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...