mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-jf5f-h3wr-j666
This commit is contained in:
+23
-4
@@ -1,11 +1,12 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-jf5f-h3wr-j666",
|
||||
"modified": "2022-05-13T01:28:41Z",
|
||||
"modified": "2023-07-07T18:49:00Z",
|
||||
"published": "2022-05-13T01:28:41Z",
|
||||
"aliases": [
|
||||
"CVE-2018-5960"
|
||||
],
|
||||
"summary": "SQL Injection in Zenario 7.1-7.6",
|
||||
"details": "Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.",
|
||||
"severity": [
|
||||
{
|
||||
@@ -14,7 +15,25 @@
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
{
|
||||
"package": {
|
||||
"ecosystem": "Packagist",
|
||||
"name": "tribalsystems/zenario"
|
||||
},
|
||||
"ranges": [
|
||||
{
|
||||
"type": "ECOSYSTEM",
|
||||
"events": [
|
||||
{
|
||||
"introduced": "7.1"
|
||||
},
|
||||
{
|
||||
"last_affected": "7.6"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
@@ -31,8 +50,8 @@
|
||||
"CWE-89"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"github_reviewed": true,
|
||||
"github_reviewed_at": "2023-07-07T18:49:00Z",
|
||||
"nvd_published_at": "2018-01-22T01:29:00Z"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user