Subrion CMS

According to its website, Subrion CMS is a PHP/MySQL based CMS & framework that allows you to build websites for any purpose. Yes, from blog to corporate mega portal.

During an independent assessment of version 4.2.1, multiple vulnerabilities were found to affect this product.

Table of contents

• CVE-2020-12467 - Session Fixation
• CVE-2020-12468 - CSV Injection via Export Language
• Insecure Deserialization