CVE-2017-11444
CRITICAL NUCLEISubrion CMS < 4.1.4 - SQL Injection via Search GET Parameter
Title source: llmExploitation Summary
CVE-2017-11444 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
Nuclei Templates (1)
Subrion CMS <4.1.5.10 - SQL Injection
CRITICALby dwisiswant0
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://github.com/intelliants/subrion/issues/479
Scores
CVSS v3
9.8
EPSS
0.1310
EPSS Percentile
95.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
intelliants/subrion_cms
< 4.1.4
Published
Jul 19, 2017
Tracked Since
Feb 18, 2026