CVE-2018-5960

Source
https://cve.org/CVERecord?id=CVE-2018-5960
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5960.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-5960
Aliases
Published
2018-01-22T01:29:00.197Z
Modified
2026-07-08T05:52:40.697091273Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or admin_boxes.ajax.php in the Categories - Edit module.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:tribalsystems:zenario:7.6:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "7.6"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "tribalsystems:zenario"
        }
    ]
}
References

Affected packages

Git / github.com/tribalsystems/zenario

Affected ranges

Type
GIT
Repo
https://github.com/tribalsystems/zenario
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:tribalsystems:zenario:7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:tribalsystems:zenario:7.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:tribalsystems:zenario:7.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:tribalsystems:zenario:7.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:tribalsystems:zenario:7.5:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "7.1"
        },
        {
            "last_affected": "7.1"
        },
        {
            "introduced": "7.2"
        },
        {
            "last_affected": "7.2"
        },
        {
            "introduced": "7.3"
        },
        {
            "last_affected": "7.3"
        },
        {
            "introduced": "7.4"
        },
        {
            "last_affected": "7.4"
        },
        {
            "introduced": "7.5"
        },
        {
            "last_affected": "7.5"
        }
    ]
}

Affected versions

7.*
7.1
7.1.0
7.1.1
7.1.2
7.2
7.2.0
7.2.1
7.2.2
7.2.3
7.3
7.3.0
7.4
7.4.0
7.4.1
7.4.2
7.4.3
7.4.4
7.5
7.5.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5960.json"