Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/02/27 6:31 p.m.11 views

Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection

Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information. Original Description Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php...

9.8CVSS7.3AI score0.00492EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2024/02/27 4:15 p.m.9 views

CVE-2024-25400

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...

9.8CVSS7.6AI score0.00492EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.2 views

PT-2024-2074 · Unknown · Subrion Cms

Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue is related to a potential SQL injection vulnerability in the ia.core.mysqli.php component of the Subrion CMS system. This could allow a remote attacker to execute arbitrary SQL queries. However...

9.8CVSS7.6AI score0.00492EPSS
Exploits1References18
CNNVD
CNNVD
added 2024/02/27 12:0 a.m.1 views

Subrion CMS Security Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from a SQL injection vulnerability in...

9.8CVSS8AI score0.00492EPSS
Exploits1References4
CVE
CVE
added 2024/02/27 12:0 a.m.10419 views

CVE-2024-25400

Subrion CMS 4.2.1 is reported vulnerable to SQL Injection via ia.core.mysqli.php, but multiple sources dispute the vulnerability due to the file contents and missing vulnerable method. Withdrawn advisories exist. No concrete fix/patch details are provided in the supplied documents; governance rem...

9.8CVSS7.5AI score0.00492EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/02/27 12:0 a.m.12 views

CVE-2024-25400

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...

7.9AI score0.00492EPSS
Exploits1References1
Rows per page
Query Builder