CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.9. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2021-27672
Severity
MEDIUM
CVSS
4.9
EPSS
1.33%
Original NVD Description
SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component.
Related CVEs
Other vulnerabilities affecting the same vendor(s)