diyarsaadi

SQL Injection Vulnerability in Subrion 4.2.1

1

# SQL Injection Vulnerability in Subrion 4.2.1 Product Information: The software that contains the vulnerability is Subrion CMS version 4.2.1. Problem Type: The type of vulnerability is SQL Injection. References:...

Subrion SQL Injection ia.core.mysqli.php

1

**Subrion 4.2.1 is vulnerable SQL Injection ** # Vulnerable Line : SQL Injection has been found. Change this code to no longer construct SQL queries directly from user-controlled data. Calling...

Vulnerable Line : SQL Injection has been found. Change this code to no longer construct SQL queries directly from user-controlled data. Calling method \iaDb,1::getAll(["var"]) in (216)\iaDb,1::_get(["row","MAX(order)","var","var","1"]) that outputs using tainted...