HIGH🇵🇱 Wersja polska

CVE-2021-41947

CVSS 7.2v3.1pub. 2021-10-08upd. 2024-11-21

A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Intelliants Subrion Cms

    APP
    Intelliants
    4.2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2017-11445CRITICAL9.8ten sam produkt

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.

CVE-2017-11444CRITICAL9.8ten sam produkt

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

CVE-2017-6013CRITICAL9.8ten sam produkt

Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.

CVE-2021-43464HIGH8.8ten sam produkt

A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background fiel...

CVE-2020-18326HIGH8.8ten sam produkt

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members admin...