GHSA-xxf8-fpmr-fw7v

ghsaUSosv

Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection

view advisory published 2024-02-27Licence: CC-BY-4.0

## Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue [here](https://github.com/intelliants/subrion/issues/910#issuecomment-2174012538) for more information. ## Original Description Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-25400US	—	0.66% (51st)	—	2024-02-27
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that on…

references

External citations — patches, advisories, analysis.

https://cwe.mitre.org/data/definitions/89.htmlWEB
https://github.com/intelliants/subrionPACKAGE
https://github.com/intelliants/subrion/issues/910WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-25400ADVISORY
https://subrion.orgWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan