Subrion@* Security Vulnerabilities and Issues — Subrion@* CVE List

Lucene search

IntelliantsSubrion*

2 matches found

CVE•added 2020/03/17 3:15 p.m.•55 views

CVE-2018-21037

Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.

8.8CVSS8.8AI score0.00177EPSS

CVE•added 2020/04/29 9:15 p.m.•35 views

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.

6.5CVSS6.5AI score0.00225EPSS