Browse CVEs

CRITICAL 9.8 CVE-2017-6013 Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter. Subrion Cms Mitigation only Fix from $2,3002017-03-27 HIGH 8.8 CVE-2017-6002 Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body par… Subrion Cms Mitigation only Fix from $1,9502017-03-27 HIGH 8.8 CVE-2017-6066 Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title… Subrion Cms Mitigation only Fix from $1,9502017-03-27 HIGH 8.8 CVE-2017-6068 Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter. Subrion Cms Mitigation only Fix from $1,9502017-03-27 HIGH 8.8 CVE-2017-6069 Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags parameter. Subrion Cms Mitigation only Fix from $1,9502017-03-27 HIGH 7.5 CVE-2011-5212 SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name o… Subrion Cms No fix yet Fix from $1,9502012-10-22 MEDIUM 6.8 CVE-2009-1659 Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upl… Elitius No fix yet Fix from $1,6002009-05-18 MEDIUM 6.8 CVE-2009-1506 SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner… Elitius No fix yet Fix from $1,6002009-05-01