Lucene search
Veracode Vulnerability DatabaseVERACODE:38308HistoryDec 01, 2022 - 4:43 a.m.
Remote Code Execution
2022-12-0104:43:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
vulnerable
remote attacker
malicious code
file upload
user form module
0.003 Low
EPSS
Percentile
68.8%
tribalsystems/zenario is vulnerable to remote code execution. It is possible for a remote attacker to upload and execute malicious code on the system via the vulnerable handlePluginAJAX function in module_code.php which resides inside User Form module, when the file upload is enabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tribalsystems/zenario | le | 9.3.57186 | |
| tribalsystems/zenario | le | 9.3.57186 |
Related
cve
cve
CVE-2022-44136
2022-11-30 15:15:10
nvd
nvd
CVE-2022-44136
2022-11-30 15:15:10
github
github
Zenario CMS is vulnerable to Remote Code Execution (RCE).
2022-11-30 15:30:27
osv
osv
CVE-2022-44136
2022-11-30 15:15:10
Zenario CMS is vulnerable to Remote Code Execution (RCE).
2022-11-30 15:30:27
prion
prion
Remote code execution
2022-11-30 15:15:00
cvelist
cvelist
CVE-2022-44136
2022-11-30 00:00:00