要点
- CVE-2024-25400 是影响 intelliants/subrion, subrion (intelliants) 的严重 (CVSS 9.8)漏洞。
- 未来 30 天内被利用的概率（EPSS）：0.66%，高于 51.5% 的漏洞。
- 暂无已修复版本：请关注参考资料中的厂商公告。
Description
Withdrawn Advisory
This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information.
Original Description
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.
NVD description
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not present in the file.
intelliants/subrion 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free