← All advisories

High severity8.8NVD Advisory· Published Jan 22, 2018· Updated Jun 17, 2026

CVE-2018-5960

CVE-2018-5960

Description

Zenario v7.1 - v7.6 has SQL injection via the Name input field of organizer.php or admin_boxes.ajax.php in the Categories - Edit module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tribalsystems/zenarioPackagist	>= 7.1, <= 7.6	—

Affected products

7

ghsa-coords
pkg:composer/tribalsystems/zenario
Range: >= 7.1, <= 7.6
Tribalsystems/Zenario6 versions
cpe:2.3:a:tribalsystems:zenario:7.1:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:tribalsystems:zenario:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:tribalsystems:zenario:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:tribalsystems:zenario:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:tribalsystems:zenario:7.4:*:*:*:*:*:*:*
- cpe:2.3:a:tribalsystems:zenario:7.5:*:*:*:*:*:*:*
- cpe:2.3:a:tribalsystems:zenario:7.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-jf5f-h3wr-j666ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-5960ghsaADVISORY
www.vulnerability-lab.com/get_content.phpnvdThird Party AdvisoryWEB

News mentions

0

No linked articles in our index yet.