2 matches found
CVE-2026-71292
Subrion CMS's admin grid sorting helper, gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the ASC/DESC request parameter via inarray, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not present in the per-controller whitelist...
7.2CVSS5.9AI score0.00572EPSS
SaveExploits0References3
CVE-2026-71292
Subrion CMS's admin grid sorting helper, gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the ASC/DESC request parameter via inarray, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not present in the per-controller whitelist...
8.6CVSS5.9AI score0.00572EPSS
SaveExploits0References4
20