Subrion CMS vulnerable to CSRF in admin/blocks/add

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter...

GHSA-Q4H5-G3W8-F9X7 Subrion CMS vulnerable to CSRF in admin/blocks/add

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter...

Subrion CMS vulnerable to CSRF in blog/delete

Subrion CMS is vulnerable to cross-site request forgery in blog/delete/. This has been patched in version 4.2.1...

GHSA-C939-G732-48R8 Subrion CMS vulnerable to CSRF in blog/delete

Subrion CMS is vulnerable to cross-site request forgery in blog/delete/. This has been patched in version 4.2.1...

Subrion CMS RCE Vulnerability

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...

GHSA-73XJ-V6GC-G5P5 Subrion CMS RCE Vulnerability

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-72212)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

GHSA-JV64-2M3X-6V4Q Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

Exploit for Unrestricted Upload of File with Dangerous Type in Intelliants Subrion_Cms

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited versi...

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

Cross site scripting

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

CVE-2021-41948

Affects Subrion CMS

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

GHSA-G54X-29XV-58H5 Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...