Lucene search

Subrion Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2017-5543

includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.

9.8CVSS

9.5AI Score

0.003EPSS

2017-01-20 08:59 AM

cve

CVE-2020-18155

SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

9.8CVSS

9.8AI Score

0.002EPSS

2021-07-14 08:15 PM