{"id":"CVE-2018-5960","aliases":["GHSA-jf5f-h3wr-j666"],"url":"https://o3.security/vulnerability/CVE-2018-5960","summary":"SQL Injection in Zenario 7.1-7.6","details":"Zenario v7.1 - v7.6 has SQL injection via the `Name` input field of organizer.php or admin_boxes.ajax.php in the `Categories - Edit` module.","published":"2018-01-22T01:29:00.197Z","modified":"2026-07-08T05:52:40.697091273Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"tribalsystems/zenario","fixedVersion":null}],"fix":null,"references":[{"type":"ADVISORY","url":"https://www.vulnerability-lab.com/get_content.php?id=2043"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:52:40.697091273Z"}}