Tribal Systems Zenario 9.0.54156

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:tribalsystems:zenario:9.0.54156:*:*:*:*:*:*:*

part: a version: 9.0.54156 update: *

VendorTribalsystems (2caec29a-18b1-565e-be77-699c69b3090a)
ProductZenario (4d6f0a7f-9a15-5f17-9ca2-ae0705105bfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/tribalsystems/zenario purl2cpe 2026-06-01 10:14:56.462111
pkg:sourceforge/tribiq purl2cpe 2026-06-01 10:14:56.462113

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42171 vulnerable 2026-06-08 05:35:21.927313 Details available
Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and so forth.
Published: 2022-03-14T14:51:06.000Z
Updated: 2024-08-04T03:30:37.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41952 vulnerable 2026-06-08 05:35:21.255304 Details available
Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.
Published: 2022-03-14T14:53:55.000Z
Updated: 2024-08-04T03:22:25.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.