Описание
Subrion CMS PHP Object Injection
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Пакеты
Наименование
intelliants/subrion
composer
Затронутые версииВерсия исправления
= 4.0.5
4.1.0
Связанные уязвимости
CVSS3: 9.8
nvd
около 9 лет назад
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.