Subrion Security Vulnerabilities and Issues — Subrion CVE List

Lucene search

IntelliantsSubrion

3 matches found

CVE•added 2020/04/29 9:15 p.m.•55 views

CVE-2020-12467

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.

6.5CVSS6.4AI score0.00285EPSS

CVE•added 2020/04/29 9:15 p.m.•36 views

CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.

6.5CVSS6.5AI score0.00225EPSS

Web

CVE•added 2020/04/29 9:15 p.m.•35 views

CVE-2020-12468

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

7.8CVSS7.6AI score0.00273EPSS

Web