Tribal Systems

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Tribal Systems records in CISA KEV

No Tribal Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zenario 21 records HIGH

Records

21 records

TI-2022-21687 CVE-2022-44136 · GHSA-4p38-rc98-cr39

Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

HIGH 76

Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01217 Published 2022-11-30 Fixed in 9.0.57473 CWE-94

TI-2023-24000 CVE-2023-44771 · GHSA-6cxv-27r2-fp3m

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local…

MEDIUM 58

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-10-06 No fix listed CWE-79

TI-2023-23999 CVE-2023-44770 · GHSA-mr4w-7vm9-cgqx

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker…

MEDIUM 58

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00591 Published 2023-10-06 No fix listed CWE-79

TI-2023-23998 CVE-2023-44769 · GHSA-8g87-73vq-443p

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local…

MEDIUM 58

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00732 Published 2023-10-24 No fix listed CWE-79

TI-2022-21674 CVE-2022-44073 · GHSA-gmf5-q34v-vwvp

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.

MEDIUM 58

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00485 Published 2022-11-16 No fix listed CWE-79

TI-2022-21673 CVE-2022-44071 · GHSA-j43m-4pxc-hmqj

Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.

MEDIUM 58

Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00485 Published 2022-11-16 No fix listed CWE-79

TI-2022-21672 CVE-2022-44070 · GHSA-f454-jm6x-56q6

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

MEDIUM 58

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00485 Published 2022-11-16 No fix listed CWE-79

TI-2022-21671 CVE-2022-44069 · GHSA-r9xx-4cmv-856x

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.

MEDIUM 58

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00485 Published 2022-11-16 No fix listed CWE-79

TI-2022-03874 CVE-2022-4231 · GHSA-6657-9743-4mc6

Tribal Systems Zenario CMS Remember Me session fixiation

MEDIUM 58

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS 9.3.57595.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00489 Published 2022-11-30 No fix listed CWE-384

TI-2024-30848 CVE-2024-45964 · GHSA-2cc5-429x-p387

Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

MEDIUM 55

Zenario 9.7.61188 is vulnerable to Cross Site Scripting (XSS) in the Image library via the "Organizer tags" field.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00366 Published 2024-10-02 No fix listed CWE-79

TI-2024-30846 CVE-2024-45960 · GHSA-3636-hx62-pv26

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing…

MEDIUM 55

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00364 Published 2024-10-02 No fix listed CWE-79

TI-2023-20690 CVE-2023-39578 · GHSA-g9c9-fx42-9w6f

A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00441 Published 2023-08-28 No fix listed CWE-79

TI-2021-08455 CVE-2021-26830 · GHSA-w4f3-7f7c-x652

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access…

MEDIUM 47

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04572 Published 2021-04-16 Fixed in 8.8.53370 CWE-89

TI-2018-13024 CVE-2018-18420 · GHSA-22cq-xxr9-jrrv

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of…

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00821 Published 2018-10-19 No fix listed CWE-352

TI-2018-04330 CVE-2018-5960 · GHSA-jf5f-h3wr-j666

Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or…

MEDIUM 40

Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00934 Published 2018-01-22 No fix listed CWE-89

TI-2021-18658 CVE-2021-42171 · GHSA-rgg3-3wh7-w935

Zenario CMS 9.0.54156 is vulnerable to File Upload.

LOW 36

Zenario CMS 9.0.54156 is vulnerable to File Upload.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02523 Published 2022-03-14 Fixed in 9.0.55143 CWE-434

TI-2022-07217 CVE-2022-23043 · GHSA-6r86-2jm9-9mh4

Unrestricted file upload in Zenario CMS

LOW 35

Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01459 Published 2022-02-22 Fixed in 9.2.55826 CWE-434

TI-2020-18806 CVE-2020-36608 · GHSA-f92p-f8r2-c87q

Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

LOW 28

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00501 Published 2022-11-02 Fixed in 8.5.51340 CWE-707

TI-2021-09117 CVE-2021-27672 · GHSA-gxcm-36qw-j29v

SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS…

LOW 25

SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when crea…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01327 Published 2021-04-15 Fixed in 8.8.53370 CWE-89

TI-2021-09118 CVE-2021-27673 · GHSA-8hcm-jj4x-4gmr

Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems…

LOW 24

Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID" parameter when crea…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01089 Published 2021-04-15 Fixed in 8.8.53370 CWE-79

TI-2021-18507 CVE-2021-41952 · GHSA-x8wj-cqmp-3wmm

Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to…

LOW 23

Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2022-03-14 Fixed in 9.0.55143 CWE-79

Open these records in search →