Session fixation

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie...

Design/Logic Flaw

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

Input validation

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

CVE-2020-12467

CVE-2020-12467 affects Subrion CMS 4.2.1. The vulnerability arises from a session fixation flaw where an alphanumeric value in a session cookie can be used to establish a session. Documented impact is limited to session fixation; no broader exploitation details are provided. No official remediati...

CVE-2020-12467

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie...

CVE-2020-12468

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

CVE-2020-12468

Subrion CMS 4.2.1 is affected by CVE-2020-12468. The vulnerability allows CSV injection through a phrase value stored in a language, specifically related to phrases/add/ and languages/download/. The root cause is the lack of input sanitization for phrase values, enabling crafted content to be int...

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

CVE-2020-12469

Subrion CMS ≤ 4.2.1 is affected by a PHP Object Injection vulnerability in admin/blocks.php. The issue arises from serialized data in the subpages value when interacting with blocks/edit, enabling object injection and potentially deletion of files. The Red Hat and CVE records corroborate the same...

Subrion CMS CSRF Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site request forgery vulnerability exists in Subrion CMS version 4.1.5 previous versions may also be affected....

CVE-2018-21037

Subrion CMS 4.1.5 and possibly earlier versions allow CSRF to change the administrator password via the panel/members/edit/1 URI...

CVE-2018-21037

Subrion CMS 4.1.5 and possibly earlier versions allow CSRF to change the administrator password via the panel/members/edit/1 URI...

Cross site request forgery (csrf)

Subrion CMS 4.1.5 and possibly earlier versions allow CSRF to change the administrator password via the panel/members/edit/1 URI...

CVE-2018-21037

Subrion CMS 4.1.5 and possibly earlier versions allow CSRF to change the administrator password via the panel/members/edit/1 URI...

CVE-2018-21037

CVE-2018-21037 documents a CSRF vulnerability in Subrion CMS 4.1.5 (and possibly earlier) that can CSRF-change the administrator password via the panel/members/edit/1 URI. The root cause is cross-site request forgery, enabling an attacker to alter the admin password without authentication under t...

Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://intelliants.com/ Software Link : https://github.com/intelliants/subrion/releases/tag/v4.0.5 Software : Subrion CMS...

Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery Add Admin Date: 2020-01-05 Exploit Author: Ismail Tasdelen Vendor Homepage: https://intelliants.com/ Software Link : https://github.com/intelliants/subrion/releases/tag/v4.0.5 Software : Subrion CMS Product Version: v 4.0.5.10...

Subrion CMS 4.0.5 - Cross-Site Request Forgery (Add Admin)

Subrion CMS 4.0.5 - Cross-Site Request Forgery Add Admin Exploit Title: Subrion CMS 4.0.5 - Cross-Site Request Forgery Add Admin Date: 2020-01-05 Exploit Author: Ismail Tasdelen Vendor Homepage: https://intelliants.com/ Software Link : https://github.com/intelliants/subrion/releases/tag/v4.0.5...

Subrion cross-site scripting vulnerability (CNVD-2019-44570)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion version 4.2.1, which can be exploited by an attacker to execute...

Cross-Site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting XSS. The vulnerability exists as the values of username, email, and fullname is not sanitized, allowing an attacker to inject arbitrary Javascript into a victim's browser via the affected parameters...