Lucene search
+L

723 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 1:10 a.m.24 views

Subrion CMS vulnerable to CSRF in blog/delete

Subrion CMS is vulnerable to cross-site request forgery in blog/delete/. This has been patched in version 4.2.1...

8.8CVSS6.8AI score0.0065EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/05/14 1:10 a.m.23 views

GHSA-C939-G732-48R8 Subrion CMS vulnerable to CSRF in blog/delete

Subrion CMS is vulnerable to cross-site request forgery in blog/delete/. This has been patched in version 4.2.1...

8.8CVSS8.6AI score0.0065EPSS
SaveExploits1References4
OSV
OSV
added 2022/05/13 1:10 a.m.31 views

GHSA-73XJ-V6GC-G5P5 Subrion CMS RCE Vulnerability

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...

7.2CVSS7.3AI score0.64261EPSS
SaveExploits10References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:10 a.m.35 views

Subrion CMS RCE Vulnerability

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...

7.2CVSS7.7AI score0.64261EPSS
SaveExploits10References6Affected Software1
CNVD
CNVD
added 2022/05/06 12:00 a.m.54 views

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-72212)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

3.5CVSS2AI score0.00479EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
added 2022/04/30 12:00 a.m.45 views

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

5.4CVSS4AI score0.00479EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/04/30 12:00 a.m.28 views

GHSA-JV64-2M3X-6V4Q Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

4.8CVSS5.2AI score0.00479EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2022/04/29 5:23 p.m.82 views

Exploit for Unrestricted Upload of File with Dangerous Type in Intelliants Subrion_Cms

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited versi...

7.2CVSS7.1AI score0.64261EPSS
SaveExploits10
NVD
NVD
added 2022/04/29 2:15 p.m.24 views

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

5.4CVSS0.00479EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/29 2:15 p.m.17 views

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

5.4CVSS5.4AI score
SaveExploits0References1
Prion
Prion
added 2022/04/29 2:15 p.m.19 views

Cross site scripting

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

3.5CVSS5.3AI score0.00479EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/29 1:41 p.m.30 views

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

5.5AI score0.00479EPSS
SaveExploits1References1
CVE
CVE
added 2022/04/29 1:41 p.m.106 views

CVE-2021-41948

Affects Subrion CMS

5.4CVSS5.3AI score0.00479EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/04/29 12:00 a.m.8 views

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...

5.4CVSS5.6AI score0.00479EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2022/04/05 12:00 a.m.52 views

Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS3.4AI score0.01415EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/04/05 12:00 a.m.138 views

GHSA-G54X-29XV-58H5 Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS8.7AI score0.01415EPSS
SaveExploits1References3
OSV
OSV
added 2022/04/04 6:15 p.m.18 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS8.7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/04 6:15 p.m.7 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS6AI score0.01415EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/04 6:15 p.m.28 views

CVE-2021-43464

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

8.8CVSS0.01415EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/04 6:15 p.m.25 views

Remote code execution

A Remiote Code Execution RCE vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval...

6.5CVSS8.7AI score0.01415EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder