723 matches found
CVE-2018-11317
Subrion CMS before 4.1.4 has XSS...
The vulnerability of the ia.core.mysqli.php component of the Intelliants Subrion CMS system allows a hacker to execute arbitrary SQL queries.
The vulnerability of the ia.core.mysqli.php component of the Intelliants Subrion CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
GHSA-Q4QH-8PXW-R48Q Subrion CMS vulnerable to Cross Site Scripting
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
Subrion CMS vulnerable to Cross Site Scripting
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection
Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information. Original Description Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php...
GHSA-XXF8-FPMR-FW7V Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection
Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information. Original Description Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php...
CVE-2024-25399
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
CVE-2024-25399
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
CVE-2024-25400
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...
Cross site scripting
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
Sql injection
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php...
CVE-2024-25400
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...
Subrion CMS Security Vulnerability
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from a cross-site scripting XSS vulnerabilit...
CVE-2024-25399
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
CVE-2024-25399
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting XSS via adminer.php...
PT-2024-20922 · Unknown · Subrion Cms
Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue is related to Cross Site Scripting XSS via the adminer.php file. This allows for potential malicious script injection. Recommendations: For Subrion CMS version 4.2.1, update to a version that...
Subrion CMS Security Vulnerability
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from a SQL injection vulnerability in...
CVE-2024-25399
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php. The underlying issue is inadequate input sanitization in the adminer.php script, enabling injection of malicious scripts that could be rendered in pages viewed by other users. No exploitation details are provided in th...
CVE-2024-25400
Subrion CMS 4.2.1 is reported vulnerable to SQL Injection via ia.core.mysqli.php, but multiple sources dispute the vulnerability due to the file contents and missing vulnerable method. Withdrawn advisories exist. No concrete fix/patch details are provided in the supplied documents; governance rem...
