Subrion CMS RCE Vulnerability

ALTO 7.2CVE-2018-19422 · GHSA-73xj-v6gc-g5p5 · Published 21/11/2018 · updated 17/06/2026

Em resumo

CVE-2018-19422 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta intelliants/subrion, subrion cms (intelliants).
Chance de exploração nos próximos 30 dias (EPSS): 64.5%, maior que 99.2% das vulnerabilidades.
Correção: atualize para 4.2.2 ou posterior.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.2.2`	`4.2.2`
subrion cms intelliants	`= 4.2.1`	No fix yet

Description

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

NVD description

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

References

Mais vulnerabilidades de intelliants/subrion

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.2.2

4.2.2

subrion cms

intelliants

= 4.2.1

No fix yet

Description

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

NVD description

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

Mais vulnerabilidades de intelliants/subrion

Ver tudo →