CVE-2017-5543
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
- Actualiza a 4.1.0
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para intelliants/subrion en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 42
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.