901 matches found
CVE-2020-18324
Subrion CMS 4.2.1 – Отражённая XSS-уязвимость в шаблоне Kickstart Описание Subrion CMS прост в установке и удобен в управлении. Используйте его как автономное приложение или в сочетании с другими приложениями для создания сайтов начального уровня, средних или крупных сайтов. Уязвимость отражённог...
Subrion CMS <4.1.5.10 - SQL Injection
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $GET array. id: CVE-2017-11444 info: name: Subrion CMS 4.1.5.10 - SQL Injection author: dwisiswant0 severity: critical description: "Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in...
Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-
Прохождение машины Exfiltrated - Subrion CMS-CVE-2021-2220- См. Exfiltrated.pdf Лаборатория: https://portal.offsec.com/machine/exfiltrated-17398/overview/details Название лаборатории: Exfiltrated Флаги: 2...
CVE-2020-18326
Subrion CMS 4.2.1 - Межсайтовая подделка запроса CSRF Добавление пользователя-администратора Описание Subrion CMS прост в установке и удобен в управлении. Используйте его как автономное приложение или в сочетании с другими приложениями для создания сайтов начального уровня, средних или крупных...
CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation
Subrion CMS: отражённая XSS v4.2.1 Автор: Sergio Описание: Множественные уязвимости межсайтового выполнения сценариев XSS в процессе установки Subrion CMS v.4.2.1 позволяют локальному злоумышленнику выполнять произвольные веб-сценарии с помощью специально созданного пейлоада, внедряемого в dbhost...
CVE-2020-18325
Множественная уязвимость межсайтового скриптинга XSS существует в панели конфигурации Intelliants Subrion CMS v4.2.1. Описание Subrion CMS легко устанавливается и прост в управлении. Используйте его как отдельное приложение или в сочетании с другими приложениями для создания сайтов начального,...
CVE-2026-96773
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96772
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96773
A vulnerability exists in Intelliants Subrion CMS versions up to 4.2.1 . The flaw resides in the iaUsers::authorize function within the front/login.php file of the Login Page component. By manipulating the $_SERVER['HTTP_REFERER'] argument, a remote attacker can trigger an open redirect . Public ...
EUVD-2026-85760
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96772
A security flaw in Intelliants Subrion CMS (up to version 4.2.1 ) allows for information disclosure via a remote attack. The vulnerability exists in an unspecified part of the /actions.json?action=assign-owner endpoint, where manipulating the q argument triggers the disclosure. While an exploit h...
EUVD-2026-85759
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96772 Intelliants Subrion CMS actions.json assign-owner information disclosure
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96772 Intelliants Subrion CMS actions.json assign-owner information disclosure
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
PT-2026-97643
Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description A security flaw allows remote information disclosure through the manipulation of the q argument. This issue occurs within the '/actions.json?action=assign-owner' endpoint...
PT-2026-97644
Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description A weakness in the Login Page component allows for a remote open redirect. This occurs through the manipulation of the $ SERVER'HTTP REFERER' variable within the iaUsers::authorize...
CVE-2026-96773: URL Redirection to Untrusted Site
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96772: Exposure of Sensitive Information to an Unauthorized Actor
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...