PT-2021-17598 · Unknown · Zenario Cms

Published 2021-04-15 · Updated 2022-05-23 · CVE-2021-27673

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zenario CMS version 8.8.52729

Description The issue allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the cID parameter when creating a new HTML component in the "admin boxes.ajax.php" component. This is a case of Cross Site Scripting (XSS), specifically Reflected XSS, which enables the execution of arbitrary code.

Recommendations For Zenario CMS version 8.8.52729, consider disabling the "admin boxes.ajax.php" component or restricting access to it until a patch is available. Avoid using the cID parameter in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-27673

GHSA-8HCM-JJ4X-4GMR

Affected Products

Zenario Cms

References · 8

• 🔥 https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38 · Exploit
• 🔥 http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/49988 · Exploit
• https://osv.dev/vulnerability/CVE-2021-27673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27673 · Security Note
• https://osv.dev/vulnerability/GHSA-8hcm-jj4x-4gmr · Vendor Advisory
• https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370 · Note
• https://github.com/TribalSystems/Zenario · Note