الباحثون
رجوع
Karthik R
#24537
من 60,596
11.8
إجمالي CVSS
الثغرات
·
2
متوسطة
1
عالية
1
PT-2012-2188
2012-10-22
4.3
CVE-2011-5211
Subrion
Subrion Cms
A cross-site scripting (XSS) issue exists in the poll module, allowing remote attackers to inject arbitrary web script or HTML via the `title` field.
PT-2012-2189
2012-10-22
7.5
CVE-2011-5212
Subrion
Subrion Cms
The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `user name` or `password` field in the admin/index.php file.