Lucene search
+L

723 matches found

Prion
Prion
added 2022/03/04 3:15 p.m.25 views

Cross site scripting

Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...

4.3CVSS6AI score0.01644EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2022/03/04 2:15 p.m.102 views

CVE-2020-18325

Subrion CMS 4.2.1 is affected by a cross-site scripting (XSS) vulnerability in the Configuration panel. The CVE description indicates multiple XSS cases exist in this area; the root cause details are not provided in the documents. Impact is described as XSS, but explicit exploit vectors, affected...

6.1CVSS5.9AI score0.01644EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/04 2:15 p.m.57 views

CVE-2020-18325

Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...

6AI score0.01644EPSS
SaveExploits2References1
CVE
CVE
added 2022/03/04 2:15 p.m.95 views

CVE-2020-18324

Subrion CMS 4.2.1 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the q parameter in the Kickstart template. The initial document and connected entries consistently identify Subrion CMS 4.2.1 and the Kickstart template q parameter as the source of the vulnerability; no e...

6.1CVSS5.9AI score0.02166EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/04 2:15 p.m.60 views

CVE-2020-18324

Cross Site Scripting XSS vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template...

6AI score0.02166EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/03/04 2:15 p.m.71 views

CVE-2020-18326

Cross Site Request Forgery CSRF vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user...

8.8AI score0.02243EPSS
SaveExploits2References1
CVE
CVE
added 2022/03/04 2:15 p.m.102 views

CVE-2020-18326

The CVE-2020-18326 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in Subrion CMS (Intelliants) v4.2.1. The flaw, exploitable via the Members administrator function, could allow a remote, unauthenticated attacker to trigger an authorized request that creates an arbitrary adminis...

8.8CVSS8.8AI score0.02243EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/04 12:00 a.m.12 views

PT-2022-8591

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS version 4.2.1 Description A Cross Site Scripting XSS issue exists in the Configuration panel of the software. This allows for potential malicious script injection and execution. No information is provided about the...

6.1CVSS6.4AI score0.01644EPSS
SaveExploits2References11
CNNVD
CNNVD
added 2022/03/04 12:00 a.m.13 views

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which can be exploited by attackers via the q parameter in the Kickstart...

6.1CVSS5.5AI score0.02166EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2022/03/04 12:00 a.m.13 views

PT-2022-8592

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS version 4.2.1 Description A Cross Site Request Forgery CSRF issue exists via the Members administrator function, allowing a remote unauthenticated malicious user to send an authorized request to a victim and successfull...

8.8CVSS7.3AI score0.02243EPSS
SaveExploits2References12
Positive Technologies
Positive Technologies
added 2022/03/04 12:00 a.m.10 views

PT-2022-8590

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description A Cross Site Scripting XSS issue exists via the q parameter in the Kickstart template, allowing for potential malicious script execution. Recommendations For Subrion CMS version 4.2.1, consider disabling t...

6.1CVSS6.4AI score0.02166EPSS
SaveExploits2References11
CNNVD
CNNVD
added 2022/03/04 12:00 a.m.15 views

Subrion CMS 跨站请求伪造漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which allows a remote, unauthenticated, malicious user to send authorizati...

8.8CVSS5.8AI score0.02243EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2022/03/04 12:00 a.m.13 views

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which can be exploited by attackers via the configuration panel...

6.1CVSS5.6AI score0.01644EPSS
SaveExploits2References4
GithubExploit
GithubExploit
added 2022/02/26 5:06 p.m.14 views

Exploit for Cross-site Scripting in Intelliants Subrion_Cms

Multilple Cross Site Scripting XSS vulnerability exists in I...

6.1CVSS6.4AI score0.01644EPSS
SaveExploits2
Veracode
Veracode
added 2022/02/25 4:57 p.m.36 views

Cross Site Scripting(XSS)

intelliants/subrion is vulnerable to cross-site scripting. The vulnerability exists because create page functionality of admin account which allows a malicious attacker to inject and execute arbitrary javascript...

4.8CVSS3.3AI score0.00494EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.9 views

CVE-2021-43724

A Cross Site Scripting XSS vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file...

4.8CVSS5.8AI score0.00494EPSS
SaveExploits1References2
NVD
NVD
added 2022/02/24 3:15 p.m.26 views

CVE-2021-43724

A Cross Site Scripting XSS vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file...

4.8CVSS0.00494EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/24 3:15 p.m.13 views

CVE-2021-43724

A Cross Site Scripting XSS vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file...

4.8CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2022/02/24 3:15 p.m.20 views

Cross site scripting

A Cross Site Scripting XSS vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file...

3.5CVSS4.8AI score0.00494EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.10 views

Subrion CMS 跨站脚本漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and prior versions in the page function that...

4.8CVSS4.9AI score0.00494EPSS
SaveExploits1References2
Rows per page
Query Builder