GitHub Advisoryadvisory · Packagist

GHSA-7q44-gfvq-6g93 SQL Injection in Subrion CMS

CRITICAL Published 2021-09-08 Modified 2021-08-02 Official page ↗

Aliases: CVE-2020-18155
Ecosystem: Packagist
Packages: intelliants/subrion
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89
Reviewed: 2021-07-16

Affected packages

• Packagist intelliants/subrion: <= 4.2.1 (no fix yet)

Description

SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

Related

Alias · CVE (1)

CVE-2020-18155 SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection. vulnerability

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References