CVE-2017-5543
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
- Обновитесь до 4.1.0
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в intelliants/subrion опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 42
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.