high8.8
CVE-2018-5960
SQL Injection in Zenario 7.1-7.6
Impact
Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | tribalsystems/zenario | >= 7.1, <= 7.6 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tribalsystems | Zenario | Versions 7.1, 7.2, 7.3, 7.4, 7.5, 7.6 |