Subrion CMS 'salt' Cookie SQL Injection Vulnerability
BID:74570
Info
Subrion CMS 'salt' Cookie SQL Injection Vulnerability
| Bugtraq ID: | 74570 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-4129 |
| Remote: | Yes |
| Local: | No |
| Published: | May 08 2015 12:00AM |
| Updated: | Jul 15 2015 12:57AM |
| Credit: | Jack Baker |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Subrion CMS 'salt' Cookie SQL Injection Vulnerability
Subrion CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Subrion CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
Subrion CMS 'salt' Cookie SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Subrion CMS 'salt' Cookie SQL Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Subrion CMS 'salt' Cookie SQL Injection Vulnerability
References:
References: