Lucene search
GoogleOSV:GHSA-8HCM-JJ4X-4GMRHistoryJun 08, 2021 - 8:11 p.m.
reflected XSS in tribalsystems/zenario
2021-06-0820:11:40
Google
osv.dev
8
0.003 Low
EPSS
Percentile
66.0%
Reflected XSS in the “admin_boxes.ajax.php” component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the “cID” parameter when creating a new HTML component.
References
packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html
deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38
github.com/TribalSystems/Zenario
github.com/TribalSystems/Zenario/releases/tag/8.8.53370
nvd.nist.gov/vuln/detail/CVE-2021-27673
Related
packetstorm
packetstorm
Zenario CMS 8.8.52729 SQL Injection
2021-06-11 00:00:00
prion
prion
Cross site scripting
2021-04-15 14:15:00
github
github
reflected XSS in tribalsystems/zenario
2021-06-08 20:11:40
cvelist
cvelist
CVE-2021-27673
2021-04-15 13:51:40
nvd
nvd
CVE-2021-27673
2021-04-15 14:15:16
cve
cve
CVE-2021-27673
2021-04-15 14:15:16