623 matches found
CVE-2020-18324
Subrion CMS 4.2.1 – Kickstartテンプレートにおける反射型XSS脆弱性 説明 Subrion CMSはインストールが簡単で、管理もシンプルです。スタンドアロンアプリケーションとして、または他のアプリケーションと組み合わせて使用し、エントリーレベルのサイト、中規模サイト、大規模サイトを作成できます。 反射型クロスサイトスクリプティングの脆弱性が、Subrion CMS...
Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-
Exfiltrated 머신 워크스루 - Subrion CMS-CVE-2021-2220- Exfiltrated.pdf 참조 Lab: https://portal.offsec.com/machine/exfiltrated-17398/overview/details Lab 이름: Exfiltrated 플래그: 2...
CVE-2020-18326
Subrion CMS 4.2.1 - クロスサイトリクエストフォージェリ（CSRF）（管理者ユーザーの追加） 説明 Subrion CMS はインストールが簡単で管理もシンプルです。スタンドアロンアプリケーションとして、あるいは他のアプリケーションと組み合わせて、エントリーレベルのサイト、中規模サイト、大規模サイトを作成するために使用できます。 クロスサイトリクエストフォージェリ（CSRF）の脆弱性が Intelliants Subrion CMS v4.2.1 の Members...
CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation
Subrion CMS 반사형 XSS v4.2.1 저자: Sergio 설명: Subrion CMS v.4.2.1 설치 과정에서 발생하는 다중 크로스 사이트 스크립팅XSS 취약점으로 인해 로컬 공격자가 dbhost, dbname, dbuser, adminusername 및 adminemail에 주입된 조작된 페이로드를 통해 임의의 웹 스크립트를 실행할 수 있습니다. 공격 벡터: dbhost, dbname, dbuser, adminusername 및 adminemail의 설치 정화 과정에서 취약점이 존재하여 JavaScript 코드...
CVE-2020-18325
Intelliants Subrion CMS v4.2.1의 구성 패널에 다중 크로스 사이트 스크립팅XSS 취약점이 존재합니다. 설명 Subrion CMS는 설치가 쉽고 관리가 간단합니다. 단독 애플리케이션으로 사용하거나 다른 애플리케이션과 함께 사용하여 초급 수준 사이트, 중형 또는 대형 사이트를 만들 수 있습니다. Subrion CMS v.4.2.1 구성 패널에서 여러 반사형 크로스 사이트 스크립팅 취약점이 발견되어 원격 공격자가 임의의 JavaScript를 주입할 수 있습니다. 날짜 : 27-02-2022 소프트웨어 링크:...
CVE-2026-96773
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96772
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-96773
A vulnerability exists in Intelliants Subrion CMS versions up to 4.2.1 . The flaw resides in the iaUsers::authorize function within the front/login.php file of the Login Page component. By manipulating the $_SERVER['HTTP_REFERER'] argument, a remote attacker can trigger an open redirect . Public ...
CVE-2026-96773 Intelliants Subrion CMS Login Page login.php authorize redirect
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
EUVD-2026-85760
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
EUVD-2026-85759
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96772 Intelliants Subrion CMS actions.json assign-owner information disclosure
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96772 Intelliants Subrion CMS actions.json assign-owner information disclosure
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
CVE-2026-96772
A security flaw in Intelliants Subrion CMS (up to version 4.2.1 ) allows for information disclosure via a remote attack. The vulnerability exists in an unspecified part of the /actions.json?action=assign-owner endpoint, where manipulating the q argument triggers the disclosure. While an exploit h...
CVE-2026-96772: Exposure of Sensitive Information to an Unauthorized Actor
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation of the argument q results in information disclosure. The attack can be executed remotely. The exploit has been released to the...
PT-2026-97643
Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description A security flaw allows remote information disclosure through the manipulation of the q argument. This issue occurs within the '/actions.json?action=assign-owner' endpoint...
PT-2026-97644
Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description A weakness in the Login Page component allows for a remote open redirect. This occurs through the manipulation of the $ SERVER'HTTP REFERER' variable within the iaUsers::authorize...
CVE-2026-96773: URL Redirection to Untrusted Site
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the component Login Page. This manipulation of the argument $SERVER'HTTPREFERER' causes open redirect. The attack is possible to be...
CVE-2026-72604
A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink without sanitization or path...