CVE-2014-9120

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

CVE-2014-9120

Subrion CMS is affected by a cross-site scripting (XSS) vulnerability in the search path. Vulnerable until version 3.2.3 (e.g., 3.2.2) due to insufficient sanitization of PATH_INFO in subrion/search/. Exploitation lets remote attackers inject arbitrary script/HTML. The fix is Subrion CMS 3.2.3 or...

Subrion CMS 3.2.2 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: XSS Vulnerability in Subrion CMS Affected Software : Subrion CMS Affected Versions: 3.2.2 and possibly below Vendor Homepage : http://www.subrion.org/ Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-912...

Subrion Auto Classifieds Persistent Xss Vulnerability

No description provided by source...

SUBRION CMS Multiple Vulnerabilities

No description provided by source...

subrion cms 2.2.1 - Multiple Vulnerabilities

No description provided by source...

Subrion CMS 2.2.1 CSRF Add Admin Exploit

No description provided by source. !-- Title: Subrion CMS 2.2.1 CSRF Add Admin Exploit Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database...

Subrion CMS 3.1.1跨站请求伪造漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites:...

Subrion 3.1.1 Cross Site Request Forgery

Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites: na3il.com,th3-creative.com 1.OVERVIEW: Subrion suffers...

Subrion v3.1.1 Cross-Site Request Forgery (CSRF) Vulnerability

Subrion CMS 3.1.1 cross site request forgery exploit that adds an administrator. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor:...

Subrion CMS 3.0.1 Cross Site Scripting

Subrion CMS 3.0.1. Multiple Cross Site Scripting Vulnerabilities Author : syst3mf4ult Homepage : http://www.subrion.com/ Vendor : subrion Version : 3.0.1 probably all versions Tested on : ubuntu 12.04 Date : 2013-10-10 ----------------------------------------------------------------------- I. POC...

Subrion CMS v2.3.x <= (FU/dDB) Multiple Vulnerabilities

This is a critical bug/zero-day found in Subrion CMS v2.3.x , the attacker can get all dump' backups with use PERL script , and the attacker can upload remote sh3ll/file .gif . This is private exploit. You can buy it at https://0day.today...

CVE-2012-5452

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 multititle parameter to blocks/add/; 2 cost, 3 days, or 4 titleen parameter to plans/add/; 5 name or 6 titleen parameter to fields/group/add/ in...

CVE-2012-4773

Multiple cross-site request forgery CSRF vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to...

CVE-2012-4771

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/accounts/, 2 admin/manage/, or 3 admin/manage/blocks/edit/; or 4 group parameter to admin/configuration/. NOTE: The...

CVE-2012-4772

SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the planid parameter...

CVE-2011-5211

Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...

CVE-2011-5212

SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the 1 user name or 2 password field...

Sql injection

SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the 1 user name or 2 password field...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify sensitive information, as demonstrated by adding an administrator account via an add action to...