Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS14anI5LTJ3ZjItM3Y0d84AAU4J
Subrion CMS Cross-site scripting in search
A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14anI5LTJ3ZjItM3Y0d84AAU4J
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: over 1 year ago
Identifiers: GHSA-xjr9-2wf2-3v4w, CVE-2014-9120
References:
- https://nvd.nist.gov/vuln/detail/CVE-2014-9120
- https://www.netsparker.com/xss-vulnerability-in-subrion-cms/
- http://dev.subrion.org/versions/130
- https://github.com/advisories/GHSA-xjr9-2wf2-3v4w
Affected Packages
packagist:intelliants/subrion
Dependent packages: 0Dependent repositories: 4
Downloads: 129 total
Affected Version Ranges: < 3.2.3
Fixed in: 3.2.3
All affected versions:
All unaffected versions: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.2.0, 4.2.1