netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-8hcm-jj4x-4gmr

Browse Source
This commit is contained in:
advisory-database[bot]
2023-07-15 05:04:12 +00:00
parent 27fd348661
commit 23744a7ee9
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
+4 -5
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8hcm-jj4x-4gmr",
"modified": "2023-07-06T17:58:59Z",
"modified": "2023-07-06T18:00:08Z",
"published": "2021-06-08T20:11:40Z",
"aliases": [
"CVE-2021-27673"
],
"summary": "SQL Injection and reflected XSS in tribalsystems/zenario",
"details": "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
"summary": "reflected XSS in tribalsystems/zenario",
"details": "Reflected XSS in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
"severity": [
{
"type": "CVSS_V3",
@@ -59,8 +59,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79",
"CWE-89"
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,