EDB-22159
funktionalsubrion CMS 2.2.1 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor High-Tech Bridge SAveröffentlicht 2012-10-22Katalog exploit_db
01
ausgenutzte CVEs (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-5452US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/a… | ||||
| CVE-2012-4773US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add,… | ||||
| CVE-2012-4772US | high7.5 | Exploit | ||
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter. | ||||
| CVE-2012-4771US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/acco… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan