PT-2017-16570

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.0.5 Description The issue allows remote attackers to conduct PHP Object Injection attacks. This is achieved by sending crafted serialized data in a salt cookie within a login request to the...

CVE-2017-5543: Improper Control of Generation of Code

includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request...