CVE-2017-11444

Subrion CMS prior to 4.1.5.10 contains a SQL injection vulnerability in /front/search.php exploitable via the $_GET array. The issue is confirmed by the Nuclei template and related CVE details, which describe arbitrary SQL execution with the GET parameters and highlight the impact as high/critica...