CVE-2020-18155

Impact

SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/intelliants/subrion/issues/817
• https://github.com/advisories/GHSA-7q44-gfvq-6g93
• https://nvd.nist.gov/vuln/detail/CVE-2020-18155
• https://github.com/intelliants/subrion/commit/c29cd72d07ca8cf6eba6f6d4496ad97d0c4d2be9