CVE-2024-25400

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...

CVE-2024-25400

The Subrion CMS 4.2.1 system is reported to be vulnerable to SQL Injection via the ia.core.mysqli.php component. The vulnerability is caused by a lack of protective measures for the SQL query structure, potentially allowing an attacker to execute arbitrary SQL queries remotely. However, multiple ...