Zenas

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zenas records in CISA KEV

No Zenas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Paolink 2 records LOW Pao-bacheca Guestbook 1 record MEDIUM Paobacheca Guestbook 1 record LOW Paoliber 1 record LOW

Records

5 records

TI-2009-03260 CVE-2009-3421 · GHSA-9x4q-26cx-fr52

login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows…

MEDIUM 50

login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04989 Published 2009-09-25 No fix listed CWE-287

TI-2009-03262 CVE-2009-3423 · GHSA-hf35-fq38-46hh

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers…

LOW 35

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02569 Published 2009-09-25 No fix listed CWE-287

TI-2009-03261 CVE-2009-3422 · GHSA-6c46-7rvf-rgx4

login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote…

LOW 35

login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02569 Published 2009-09-25 No fix listed CWE-287

TI-2009-03331 CVE-2009-3493 · GHSA-637x-5jgj-26w6

Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01558 Published 2009-09-30 No fix listed CWE-79

TI-2009-03162 CVE-2009-3320 · GHSA-fhmg-6ffp-g88h

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link)…

LOW 23

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2009-09-23 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	4
Low	0
No CVSS	0