En resumen
- CVE-2021-26830 es una vulnerabilidad CRÍTICO (CVSS 9.1) que afecta a tribalsystems/zenario, zenario (tribalsystems).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.6%, mayor que el 91.6% de las vulnerabilidades.
- Solución: actualizar a 8.8.53370 o posterior.
Description
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 and prior allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module.
NVD description
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.
Más vulnerabilidades de tribalsystems/zenario
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free