Subrion CMS vulnerable to SQL injection by an authenticated user

Overview Subrion CMS is vulnerable to SQL injection from authenticated users when a browser cookie is modified in a certain way. Description Subrion is an open source web-based content management system CMS. Subrion is vulnerable to SQL injection due to deserialization of untrusted data from a...

Subrion 3.3.0 Cross Site Request Forgery

Affected software: subrion Type of vulnerability: csrf to sql injection URL: http://demo.subrion.org Discovered by: Provensec Website: http://www.provensec.com version v3.3.0 Proof of concept no csrf protection on database form which made subrion to vulnerable to database injection vuln parameter...

Subrion CMS 'search' Functionality Cross Site Scripting Vulnerability

Subrion CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-9120

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

Cross site scripting

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

CVE-2014-9120

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

CVE-2014-9120

Subrion CMS is affected by a cross-site scripting (XSS) vulnerability in the search path. Vulnerable until version 3.2.3 (e.g., 3.2.2) due to insufficient sanitization of PATH_INFO in subrion/search/. Exploitation lets remote attackers inject arbitrary script/HTML. The fix is Subrion CMS 3.2.3 or...

PT-2014-8838

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 3.2.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to the subrion/search/ endpoint. This enables attackers to execute malicious...

CVE-2014-9120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to subrion/search/...

Subrion CMS 3.2.2 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: XSS Vulnerability in Subrion CMS Affected Software : Subrion CMS Affected Versions: 3.2.2 and possibly below Vendor Homepage : http://www.subrion.org/ Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-912...

Subrion CMS 2.2.1 CSRF Add Admin Exploit

No description provided by source. !-- Title: Subrion CMS 2.2.1 CSRF Add Admin Exploit Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database...

subrion cms 2.2.1 - Multiple Vulnerabilities

No description provided by source...

Subrion Auto Classifieds Persistent Xss Vulnerability

No description provided by source...

SUBRION CMS Multiple Vulnerabilities

No description provided by source...

Subrion CMS 3.1.1跨站请求伪造漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites:...

Subrion v3.1.1 Cross-Site Request Forgery (CSRF) Vulnerability

Subrion CMS 3.1.1 cross site request forgery exploit that adds an administrator. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor:...

Subrion 3.1.1 Cross Site Request Forgery

Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites: na3il.com,th3-creative.com 1.OVERVIEW: Subrion suffers...

Subrion CMS 3.0.1 Cross Site Scripting

Subrion CMS 3.0.1. Multiple Cross Site Scripting Vulnerabilities Author : syst3mf4ult Homepage : http://www.subrion.com/ Vendor : subrion Version : 3.0.1 probably all versions Tested on : ubuntu 12.04 Date : 2013-10-10 ----------------------------------------------------------------------- I. POC...

Subrion CMS v2.3.x <= (FU/dDB) Multiple Vulnerabilities

This is a critical bug/zero-day found in Subrion CMS v2.3.x , the attacker can get all dump' backups with use PERL script , and the attacker can upload remote sh3ll/file .gif . This is private exploit. You can buy it at https://0day.today...

CVE-2012-5452

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 multititle parameter to blocks/add/; 2 cost, 3 days, or 4 titleen parameter to plans/add/; 5 name or 6 titleen parameter to fields/group/add/ in...