GCVE-110-CERTCC-2015-110532

Advisory PublishedCVSS 9.0/10

Vulnetix · Advisory published April 27, 2015

Subrion CMS is vulnerable to SQL injection from authenticated users when a browser cookie is modified in a certain way.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.0/10

Critical · AV:N/AC:L/Au:S/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score7remediation_levelOFreport_confidenceCenvironmental_score5.3044065648target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

References

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

url

Subrion CMS vulnerable to SQL injection by an authenticated user

advisory

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON