SQL Injection

Subrion is vulnerable to SQL Injection attacks. The library does not have any checking for user input through the $GET parameter in /front/search.php, allowing a malicious user to inject and execute arbitrary SQL...

CVE-2017-11445

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $POST array...

Sql injection

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $POST array...

Sql injection

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $GET array...

CVE-2017-11444

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $GET array...

CVE-2017-11445

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $POST array...

CVE-2017-11444

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $GET array...

CVE-2017-11445

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $POST array...

CVE-2017-11445

CVE-2017-11445 affects Subrion CMS prior to 4.1.6. The vulnerability is a SQL injection in the file /front/actions.php reachable via the POST data ($_POST), caused by insufficient input handling in Subrion CMS. Reported across multiple sources (CNVD, NVD, OSV, Veracode) with the root cause descri...

CVE-2017-11444

Subrion CMS prior to 4.1.5.10 contains a SQL injection vulnerability in /front/search.php exploitable via the $_GET array. The issue is confirmed by the Nuclei template and related CVE details, which describe arbitrary SQL execution with the GET parameters and highlight the impact as high/critica...

CVE-2017-11444

Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $GET array...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2017-18106)

Subrion CMS is a powerful and easy-to-use PHP content management system with full source editing, per-page permissions, user activity monitoring and other powerful features. Subrion CMS suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject arbitrary...

CVE-2017-10795

Cross-site scripting XSS vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069...

Cross site scripting

Cross-site scripting XSS vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069...

CVE-2017-10795

Cross-site scripting XSS vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069...

CVE-2017-10795

Cross-site scripting XSS vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069...

CVE-2017-10795

CVE-2017-10795 reads as a Subrion CMS 4.1.4 vulnerability—an XSS flaw that allows remote attackers to inject arbitrary script/HTML via the body of blog/add/. The description explicitly notes it is a separate issue from CVE-2017-6069. Concrete details in the connected documents confirm the affecte...

Subrion CMS SQL Injection Vulnerability

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A SQL injection vulnerability exists in the admin/database/ URI in Subrion CMS version 4.0.5.10. A remote...

Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04652)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in the admin/blog/add/ URI in Subrion CMS version 4.0.5...

Subrion CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-04653)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site request forgery vulnerability exists in admin/blocks/add/URI in Subrion CMS version 4.0.5. An...