CVE-2015-4129

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cret@cert.org

Published

2015-07-05

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Subrion Cms (Intelliants)

References

• http://www.kb.cert.org/vuls/id/110532
• http://www.securityfocus.com/bid/74570
• http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/