← All advisories

High severity8.8NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026

CVE-2017-6068

CVE-2017-6068

Description

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
intelliants/subrionPackagist	<= 4.0.5	—

Affected products

2

Intelliants/Subrion CMS
cpe:2.3:a:intelliants:subrion_cms:4.0.5:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/intelliants/subrion
Range: <= 4.0.5

Patches

Vulnerability mechanics

References

5

www.securityfocus.com/bid/97091nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-q4h5-g3w8-f9x7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-6068ghsaADVISORY
www.yiwang6.cn/Subrion-CSRF1.docxnvdBroken LinkThird Party Advisory
web.archive.org/web/20210126223835/http://www.securityfocus.com/bid/97091ghsaWEB

News mentions

0

No linked articles in our index yet.