SQL Injection Vulnerability in Subrion CMS by Intelliants
CVE-2020-18155

9.8CRITICAL

Key Information:

Vendor

Intelliants

Status
Subrion
Vendor
CVE Published:
14 July 2021

What is CVE-2020-18155?

An SQL Injection vulnerability exists in Subrion CMS version 4.2.1 that may be exploited through the search page when the application uses a PDO connection. Attackers can manipulate SQL queries executed by the database, potentially leading to unauthorized data access or server compromise. It's essential for users of this CMS version to implement security measures to mitigate these risks.

References

https://github.com/intelliants/subrion/issues/817
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.