Intelliants Subrion vulnerabilities

CVE-2018-19422 [HIGH] CWE-434 Subrion CMS RCE Vulnerability Subrion CMS RCE Vulnerability `/panel/uploads` in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

CVE-2018-14840 [MEDIUM] CWE-79 CVE-2018-14840: uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

CVE-2023-46947 [HIGH] CWE-94 CVE-2023-46947: Subrion 4.2.1 has a remote command execution vulnerability in the backend. Subrion 4.2.1 has a remote command execution vulnerability in the backend.

CVE-2019-17225 [MEDIUM] CWE-79 CVE-2019-17225: Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin M Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

CVE-2020-18155 [CRITICAL] CWE-89 CVE-2020-18155: SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connect SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

CVE-2024-25400 [CRITICAL] CWE-89 CVE-2024-25400: Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by m Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not present in the file.

CVE-2017-5543 [CRITICAL] CWE-94 CVE-2017-5543: includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Objec includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.

CVE-2021-43464 [HIGH] Remote code execution in Subrion Remote code execution in Subrion Subrion is an open source php content management system. A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().

CVE-2020-18326 [HIGH] CWE-352 Cross Site Request Forgery in intelliants/subrion Cross Site Request Forgery in intelliants/subrion Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.

CVE-2018-21037 [HIGH] CWE-352 CVE-2018-21037: Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password vi Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.

CVE-2017-15063 [HIGH] CWE-352 CVE-2017-15063: There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a lo There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing (for example) an attack against the query parameter to panel/database.

CVE-2019-7357 [HIGH] CWE-352 Subrion CMS CSRF Vulnerability Subrion CMS CSRF Vulnerability Subrion CMS 4.2.1 has CSRF in `panel/modules/plugins/`. The attacker can remotely activate/deactivate the plugins.

CVE-2019-20390 [HIGH] CWE-352 CVE-2019-20390: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a GET request. An attacker can craft a panel/uploads/read.

CVE-2020-12468 [HIGH] CVE-2020-12468: Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phra Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

CVE-2020-12469 [MEDIUM] CWE-502 CVE-2020-12469: admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file delet admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.

CVE-2017-6068 [HIGH] CWE-352 Subrion CMS vulnerable to CSRF in admin/blocks/add Subrion CMS vulnerable to CSRF in admin/blocks/add Subrion CMS 4.0.5 has CSRF in `admin/blocks/add/`. The attacker can create any block, and can optionally insert XSS via the content parameter.

CVE-2020-12467 [MEDIUM] CWE-384 CVE-2020-12467: Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.

CVE-2017-10795 [MEDIUM] CWE-79 CVE-2017-10795: Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbi Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

CVE-2020-23761 [MEDIUM] CWE-79 CVE-2020-23761: Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab.

CVE-2019-20389 [MEDIUM] CWE-79 CVE-2019-20389: An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A r An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's browser without proper output encoding.