CVE-2015-4129

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.

🔗 References (6)

• cret@certhttp://www.kb.cert.org/vuls/id/110532
• cret@certhttp://www.securityfocus.com/bid/74570
• cret@certhttp://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/
• af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/110532
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/74570
• af854a3a-2127-422b-91ae-364da2661108http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/