CVE-2018-5960

Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2018-01-22

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Zenario (Tribalsystems)

References

• https://www.vulnerability-lab.com/get_content.php?id=2043