GHSA-xxf8-fpmr-fw7v

Suggest an improvement
Source
https://github.com/advisories/GHSA-xxf8-fpmr-fw7v
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-xxf8-fpmr-fw7v/GHSA-xxf8-fpmr-fw7v.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xxf8-fpmr-fw7v
Aliases
Withdrawn
2024-06-18T16:34:05Z
Published
2024-02-27T18:31:01Z
Modified
2026-09-10T03:50:00Z
Summary
Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection
Details

Withdrawn Advisory

This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue here for more information.

Original Description

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.

Database specific
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-02-27T21:48:32Z",
    "nvd_published_at":  "2024-02-27T16:15:46Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / intelliants/subrion

Package

Name
intelliants/subrion
Purl
pkg:composer/intelliants/subrion

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
4.2.1

Affected versions

v4.*
v4.0.0
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.2.0
v4.2.1

Database specific

source
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-xxf8-fpmr-fw7v/GHSA-xxf8-fpmr-fw7v.json"