Em resumo
- CVE-2021-26830 é uma vulnerabilidade CRÍTICO (CVSS 9.1) que afeta tribalsystems/zenario, zenario (tribalsystems).
- Chance de exploração nos próximos 30 dias (EPSS): 4.6%, maior que 91.6% das vulnerabilidades.
- Correção: atualize para 8.8.53370 ou posterior.
Description
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 and prior allows remote attackers to access the database or delete the plugin. This is accomplished via the ID input field of ajax.php in the Pugin library - delete module.
NVD description
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.
Mais vulnerabilidades de tribalsystems/zenario
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free