What’s Vulnerable › Vulnerabilities

CVE-2015-4129

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-07-05 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie.

Affected products

• Intelliants Subrion CMS: through 3.3.2

References

• http://www.kb.cert.org/vuls/id/110532
• http://www.securityfocus.com/bid/74570
• http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/
• http://www.kb.cert.org/vuls/id/110532
• http://www.securityfocus.com/bid/74570
• http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/

Get alerted when CVE-2015-4129 or the next vulnerability affects your stack