EDB-22159
functionalsubrion CMS 2.2.1 - Multiple Vulnerabilities
view exploit source exploit_dbverifiedtype webappsauthor High-Tech Bridge SApublished 2012-10-22catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-5452US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/a… | ||||
| CVE-2012-4773US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add,… | ||||
| CVE-2012-4772US | high7.5 | Exploit | ||
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter. | ||||
| CVE-2012-4771US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/acco… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan