CVE Catalog
CVE-2017-5543
CriticalSummary
In Subrion CMS version 4.0.5, a vulnerability allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Risk Assessment
Attackers can exploit this vulnerability to execute unauthorized code on the server, potentially leading to serious data security breaches.
Recommendation
It is recommended to update Subrion CMS to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.