Description
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter.
References
- 97087 vdb-entry
- http://www.yiwang6.cn/Subrion-CSRF.docx
Unscored
CVE-2017-6066
EUVD-2017-15134GHSA-vpvv-2wvh-c6m3
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via…
Published Mar 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre