CVE-2017-11444
CRITICAL NUCLEIIntelliants Subrion Cms < 4.1.4 - SQL Injection
Title source: ruleDescription
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
Nuclei Templates (1)
Subrion CMS <4.1.5.10 - SQL Injection
CRITICALby dwisiswant0
Scores
CVSS v3
9.8
EPSS
0.7929
EPSS Percentile
99.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
intelliants/subrion_cms
< 4.1.4
Published
Jul 19, 2017
Tracked Since
Feb 18, 2026