723 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Intelliants Subrion_Cms
CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated...
Exploit for Unrestricted Upload of File with Dangerous Type in Intelliants Subrion_Cms
CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated...
Subrion CMS Remote Code Execution (CVE-2018-19422)
A remote code execution vulnerability exists in Subrion CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Subrion CMS 4.2.1 - File Upload Bypass to RCE (Authenticated) Exploit
Exploit Title: Subrion CMS 4.2.1 - File Upload Bypass to RCE Authenticated Exploit Author: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2.1 Tested on: Debian9, Debian 10 and Ubuntu 16.04 CVE: CVE-2018-19422...
Cross-site Scripting (XSS)
intelliants/subrion is vulnerable to cross-site scripting XSS. An attacker can inject xss payload on the “payment gateway” column and save the entry to get it executed when a user visits the page...
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2021-27920)
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion CMS 4.2.1 and earlier versions. The vulnerability can be...
CVE-2020-23761
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
CVE-2020-23761
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
Cross site scripting
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
CVE-2020-23761
Subrion CMS contains a Cross Site Scripting (XSS) vulnerability in versions up to 4.2.1, exploitable via the “payment gateway” field on the Transactions tab. The issue is a client‑side scripting flaw that can be triggered by crafted input and could lead to arbitrary script execution in the contex...
CVE-2020-23761
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
Subrion CMS 跨站脚本漏洞
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion CMS 4.2.1 and earlier versions. The vulnerability can be...
Subrion CMS 4.2.1 Cross Site Scripting
Exploit Title: Subrion CMS 4.2.1 - 'avatarpath' XSS Date: 2020-12-15 Exploit Author: icekam Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: Subrion CMS 4.2.1 CVE : CVE-2020-35437 stored xss vulnerability in /core/profile/. Reproduce through the...
Subrion CMS 4.2.1 - 'avatar[path]' XSS
Exploit Title: Subrion CMS 4.2.1 - 'avatarpath' XSS Date: 2020-12-15 Exploit Author: icekam Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: Subrion CMS 4.2.1 CVE : CVE-2020-35437 stored xss vulnerability in /core/profile/. Reproduce through the...
Cross-site Scripting (XSS)
intelliants/subrion is vulnerable to cross-site scripting XSS. The vulnerability exists through an iframe injection through the page content block in the Add a Page section...
Subrion Cross-Site Scripting Vulnerability (CNVD-2020-75156)
Subrion is a powerful and easy to use PHP content management system with full source editing, per page permissions, user activity monitoring and other powerful features. A cross-site scripting vulnerability exists in Subrion 4.2.1. The vulnerability can be exploited to conduct a cross-site...
CVE-2020-35437
Subrion CMS 4.2.1 is affected by: Cross Site Scripting XSS through the avatarpath parameter in a POST request to the /core/profile/ URI...
CVE-2020-35437
Subrion CMS 4.2.1 is affected by: Cross Site Scripting XSS through the avatarpath parameter in a POST request to the /core/profile/ URI...