CVE-2017-5543
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
- Update to 4.1.0
Published Updated
PatchFirst · Latest vulnerabilities
intelliants/subrion vulnerabilities · Page 3
Vulnerabilities published for intelliants/subrion in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 42
CVE-2014-9120
Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.
- Update to 3.2.3
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.