Lucene search
GitHub Advisory DatabaseGHSA-XJR9-2WF2-3V4WHistoryMay 14, 2022 - 2:00 a.m.
Subrion CMS Cross-site scripting in search
2022-05-1402:00:54
CWE-79
GitHub Advisory Database
github.com
2
cross-site scripting
subrion cms
remote attackers
injection
web script
html
vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
43.3%
A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.
Affected configurations
Node
intelliantssubrionRange<3.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intelliants | subrion | * | cpe:2.3:a:intelliants:subrion:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2014-12-10 15:59:00
cvelist
cvelist
CVE-2014-9120
2014-12-10 15:00:00
packetstorm
packetstorm
Subrion CMS 3.2.2 Cross Site Scripting
2014-12-09 00:00:00
openvas
openvas
Subrion CMS 'search' Functionality Cross Site Scripting Vulnerability
2014-12-17 00:00:00
nvd
nvd
CVE-2014-9120
2014-12-10 15:59:20
osv
osv
Subrion CMS Cross-site scripting in search
2022-05-14 02:00:54
cve
cve
CVE-2014-9120
2014-12-10 15:59:20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.001
Percentile
43.3%
Related for GHSA-XJR9-2WF2-3V4W