Skip to content
OpenAdvisories

Package · Packagist

intelliants/subrion

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-18326 Public exploit

    Cross Site Request Forgery in intelliants/subrion

    Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary …

    intelliants/subrion Packagist
  • High 8.8
    CVE-2019-7357 Public exploit

    Subrion CMS CSRF Vulnerability

    Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.

    intelliants/subrion Packagist
  • High 7.2
    CVE-2018-19422 Public exploit EPSS 65%

    Subrion CMS RCE Vulnerability

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

    intelliants/subrion Packagist