12 matches found
CVE-2023-26857
An arbitrary file upload vulnerability in /admin/ajax.php?action=saveuploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Subrion CMS RCE Vulnerability
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...
Exploit for Unrestricted Upload of File with Dangerous Type in Intelliants Subrion_Cms
CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated...
CVE-2019-20390
A Cross-Site Request Forgery CSRF vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a G...
PT-2020-10415
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description A Cross-Site Request Forgery CSRF issue allows a remote attacker to remove files on the server without the victim's knowledge. This is achieved by enticing an authenticated user to visit an attacker's web...
CVE-2019-20390: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a G...
CVE-2018-16629
panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...
CVE-2018-16629
panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...
PT-2018-13655
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for cross-site scripting XSS attacks via an SVG file containing JavaScript in a SCRIPT element, specifically affecting the "panel/uploads/elf l1 XA" endpoint. Recommendations For Subrion C...
CVE-2018-16629: Improper Neutralization of Input During Web Page Generation
panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...
Subrion CMS Arbitrary PHP Code Execution Vulnerability
Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A security vulnerability exists in /panel/uploads in Subrion CMS version 4.2.1, which stems from the failu...