CVE-2017-6066: XSS
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6066?
CVE-2017-6066 is classified as a medium severity vulnerability due to its potential for CSRF and XSS exploitation.
How do I fix CVE-2017-6066?
To fix CVE-2017-6066, ensure your Subrion CMS installation is updated to a version that includes a patch for the CSRF vulnerability.
What type of vulnerability is CVE-2017-6066?
CVE-2017-6066 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Subrion CMS.
Can CVE-2017-6066 lead to data compromise?
Yes, CVE-2017-6066 can lead to unauthorized actions being performed on behalf of an admin, potentially compromising data.
Are there any exploit examples for CVE-2017-6066?
Yes, CVE-2017-6066 allows attackers to perform actions such as modifying language settings, which can include XSS vulnerabilities via the title parameter.