Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Zenbership records in CISA KEVNo Zenbership vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 41
SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01403 · Published 2017-06-19 · No fix listed CWE-89
Open these records in search →