HIGH🇵🇱 Wersja polska

CVE-2020-18326

CVSS 8.8v3.1pub. 2022-03-04upd. 2026-07-05

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Intelliants Subrion Cms

    APP
    Intelliants
    4.2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-11445CRITICAL9.8ten sam produkt

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.

CVE-2017-11444CRITICAL9.8ten sam produkt

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

CVE-2017-6013CRITICAL9.8ten sam produkt

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.

CVE-2021-43464HIGH8.8ten sam produkt

A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background fiel...

CVE-2021-41947HIGH7.2ten sam produkt

A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.