Show filters
68 Total Results
Displaying 1-10 of 68
Sort by:
Attacker Value
Moderate
CVE-2021-41947
Disclosure Date: October 08, 2021 (last updated November 28, 2024)
A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.
2
Attacker Value
High
CVE-2014-0160 (AKA: Heartbleed)
Disclosure Date: April 07, 2014 (last updated July 03, 2024)
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
0
Attacker Value
Unknown
CVE-2023-46947
Disclosure Date: November 03, 2023 (last updated November 14, 2023)
Subrion 4.2.1 has a remote command execution vulnerability in the backend.
0
Attacker Value
Unknown
CVE-2023-43875
Disclosure Date: October 19, 2023 (last updated October 31, 2023)
Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.
0
Attacker Value
Unknown
CVE-2023-43884
Disclosure Date: September 28, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter.
0
Attacker Value
Unknown
CVE-2023-43830
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.
0
Attacker Value
Unknown
CVE-2023-43828
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
0
Attacker Value
Unknown
CVE-2022-43120
Disclosure Date: November 09, 2022 (last updated December 22, 2024)
A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.
0
Attacker Value
Unknown
CVE-2022-43121
Disclosure Date: November 09, 2022 (last updated December 22, 2024)
A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field.
0
Attacker Value
Unknown
CVE-2022-37059
Disclosure Date: August 29, 2022 (last updated October 08, 2023)
Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field
0
