Subrion CMS 'front/actions.php' Arbitrary File Deletion Vulnerability

Subrion CMS is a PHP-based content management system. An arbitrary file deletion vulnerability exists in Subrion CMS 'front/actions.php'. An attacker can exploit the vulnerability to delete arbitrary files...

Subrion CMS 4.0.5 - SQL Injection

Subrion CMS 4.0.5 - SQL Injection Document Title: =============== Subrion v4.0.5 CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1893 Release Date: ============= 2016-08-04 Vulnerability Laboratory ID VL-ID:...

Subrion CMS 4.0.5 - SQL Injection

Exploit for php platform in category web applications Document Title: =============== Subrion v4.0.5 CMS - SQL Injection Vulnerability Product & Service Introduction: =============================== Subrion is a full featured open source CMS written in PHP 5 & MySQL with many options. Here is the...

Subrion 3.x.x File Download / Arbitrary Access

Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...

Subrion 3.X.X - Multiple Vulnerabilities

Exploit for php platform in category web applications - Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X...

Subrion 3.x - Multiple Vulnerabilities

Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...

Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title : Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability Author : ZwX Vendor : http://www.subrion.com/ Severity Level : Medium Tested on : Windows 7 ------------------------ Description ------------------------ An attacker can inject ...

CVE-2015-4129

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie...

Sql injection

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie...

CVE-2015-4129

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie...

CVE-2015-4129

CVE-2015-4129 is a SQL injection vulnerability in Subrion CMS prior to 3.3.3. The issue arises from processing modified serialized data in a salt cookie, allowing remote authenticated users to execute arbitrary SQL commands. Affected software: Subrion CMS; vulnerable component: cookie serializati...

CVE-2015-4129: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie...

PT-2015-6422

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 3.3.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie. Recommendations For versions prior to 3.3.3, update to version 3.3.3 o...

Subrion CMS 'salt' SQL Injection Vulnerability

Subrion CMS is an open source content management system CMS. A SQL injection vulnerability exists in Subrion CMS. An attacker could exploit this vulnerability to take control of the application and access or modify data...

Subrion CMS 'search' Functionality Cross Site Scripting Vulnerability

Subrion CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-9120

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

Cross site scripting

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

CVE-2014-9120

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

CVE-2014-9120

Subrion CMS is affected by a cross-site scripting (XSS) vulnerability in the search path. Vulnerable until version 3.2.3 (e.g., 3.2.2) due to insufficient sanitization of PATH_INFO in subrion/search/. Exploitation lets remote attackers inject arbitrary script/HTML. The fix is Subrion CMS 3.2.3 or...

CVE-2014-9120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...