High severity8.8NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026
CVE-2017-6066
CVE-2017-6066
Description
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter.
Affected products
2- cpe:2.3:a:intelliants:subrion_cms:4.0.5:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/97087nvdThird Party AdvisoryVDB Entry
- www.yiwang6.cn/Subrion-CSRF.docxnvdBroken LinkThird Party Advisory
News mentions
0No linked articles in our index yet.