Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HIntelliants Subrion Cms
APPIntelliants≤ 4.1.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Powiązane podatności
CVE-2017-11444CRITICAL9.8ten sam produkt
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
CVE-2017-6013CRITICAL9.8ten sam produkt
Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
CVE-2021-43464HIGH8.8ten sam produkt
A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background fiel...
CVE-2020-18326HIGH8.8ten sam produkt
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members admin...
CVE-2021-41947HIGH7.2ten sam produkt
A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.