Description
SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.
References
- http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/
- VU#110532 third-party-advisory
- 74570 vdb-entry