medium6.5
CVE-2015-4129
SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a s…
Impact
SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelliants | Subrion Cms | through 3.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/110532
- http://www.securityfocus.com/bid/74570
- http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/
- http://www.kb.cert.org/vuls/id/110532
- http://www.securityfocus.com/bid/74570
- http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/