Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4600
HistoryJul 19, 2017 - 9:03 p.m.

SQL Injection

2017-07-1921:03:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.017 Low

EPSS

Percentile

87.7%

Subrion is vulnerable to SQL Injection attacks. The library does not have any checking for user input through the $_GET parameter in /front/search.php, allowing a malicious user to inject and execute arbitrary SQL.

CPENameOperatorVersion
intelliants/subrionle4.1.5.20-dev

0.017 Low

EPSS

Percentile

87.7%

Related for VERACODE:4600