Subrion CMS RCE Vulnerability
`/panel/uploads` in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-19422US | high7.2 | Exploit | ||
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/162591/Subrion-CMS-4.2.1-Shell-Upload.htmlWEB
- http://packetstormsecurity.com/files/173998/Intelliants-Subrion-CMS-4.2.1-Remote-Code-Execution.htmlWEB
- https://github.com/intelliants/subrion/commit/74359bcfaea424edda6d782a8ac25397c55972abWEB
- https://github.com/intelliants/subrion/issues/801WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-19422ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan