Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection

Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information. Original Description Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php...

CVE-2024-25400

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...

CVE-2024-25400

The Subrion CMS 4.2.1 system is reported to be vulnerable to SQL Injection via the ia.core.mysqli.php component. The vulnerability is caused by a lack of protective measures for the SQL query structure, potentially allowing an attacker to execute arbitrary SQL queries remotely. However, multiple ...

Subrion CMS Security Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from a SQL injection vulnerability in...

PT-2024-2074 · Unknown · Subrion Cms

Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue is related to a potential SQL injection vulnerability in the ia.core.mysqli.php component of the Subrion CMS system. This could allow a remote attacker to execute arbitrary SQL queries. However...

CVE-2024-25400

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...

CVE-2024-25400: Improper Neutralization of Special Elements used in an SQL Command

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not...