Skip to content
Noroxi

zenas records

5 published records for vendor zenas.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2009-3421
      40Plan

      login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain adm

      CriticalCVSS 9.8Proof of conceptEPSS 5%

      zenas · pao-bacheca guestbookSep 25, 2009

    • CVE-2009-3422
      28Monitor

      login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative

      MediumCVSS 6.8Proof of conceptEPSS 3%

      zenas · paoliberSep 25, 2009

    • CVE-2009-3423
      28Monitor

      login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative a

      MediumCVSS 6.8Proof of conceptEPSS 3%

      zenas · paolinkSep 25, 2009

    • CVE-2009-3493
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script

      MediumCVSS 4.3Proof of conceptEPSS 2%

      zenas · paobacheca guestbookSep 30, 2009

    • CVE-2009-3320
      17Monitor

      Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web s

      MediumCVSS 4.3Proof of conceptEPSS 1%

      zenas · paolinkSep 23, 2009