~ / search / GHSA-7q44-gfvq-6g93

GHSA-7q44-gfvq-6g93

SQL Injection in Subrion CMS

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-18155

Packages

EcosystemPackageAffectedFixed in
Packagist intelliants/subrion <= 4.2.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

References

External links from the advisory. They lead to third-party sites.