CRITICAL🇵🇱 Wersja polska

CVE-2017-11444

CVSS 9.8v3.0pub. 2017-07-19upd. 2026-05-13

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Intelliants Subrion Cms

    APP
    Intelliants
    ≤ 4.1.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2017-11445CRITICAL9.8ten sam produkt

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.

CVE-2017-6013CRITICAL9.8ten sam produkt

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.

CVE-2021-43464HIGH8.8ten sam produkt

A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background fiel...

CVE-2020-18326HIGH8.8ten sam produkt

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members admin...

CVE-2021-41947HIGH7.2ten sam produkt

A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.