Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04653)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in admin/blocks/add/URI in Subrion CMS version 4.0.5. An...

CVE-2017-6068: Cross-Site Request Forgery (CSRF)

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter...

PT-2017-16876

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.0.5 Description The issue allows an attacker to perform a CSRF attack on the "admin/blocks/add/" endpoint, enabling them to create any block. Additionally, the attacker can optionally insert XSS via the content parameter...

PT-2012-5977

Name of the Vulnerable Software and Affected Versions Subrion CMS version 2.2.1 Subrion CMS version 2.2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including multi title in "/blocks/add/", cost, days, or titleen in "/plans/add/",...