CVE-2020-18326
HighCVSS 8.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A CSRF vulnerability in Subrion CMS v4.2.1 allows an unauthenticated attacker to send a crafted request to an administrator, resulting in the creation of an arbitrary administrator account.
Risk Assessment
The risk involves potential takeover of the system by an attacker who can create a new administrator account and gain full access to the CMS management panel.
Recommendation
It is recommended to immediately update Subrion CMS to the latest version and implement CSRF protection mechanisms such as anti-CSRF tokens.
Other vulnerabilities in Subrion CMS
See all- CVE-2017-15063High
There are CSRF vulnerabilities in Subrion CMS versions 4.1.x through 4.1.5 and before 4.2.0 due to a logic error. Although there is functionality to detect CSRF, it is called too late in the ia.core.php code, allowing attacks against the query parameter to the panel/database.
- CVE-2017-6069High
Subrion CMS version 4.0.5 has a CSRF vulnerability in the admin/blog/add/ module. An attacker can add any tag and optionally inject XSS via the tags parameter.
- CVE-2017-6068High
Subrion CMS version 4.0.5 has a CSRF vulnerability in the admin/blocks/add/ module that allows an attacker to create any blocks. Additionally, the attacker can optionally inject XSS via the content parameter.
- CVE-2017-6066High
Subrion CMS version 4.0.5 has a CSRF vulnerability in the language editing module. An attacker can perform any Edit Language action and optionally inject XSS via the title parameter.
- CVE-2017-6002High
Subrion CMS version 4.0.5.10 has a CSRF vulnerability in the admin/blog/add/ module. An attacker can add any blog entry and optionally inject XSS via the body parameter.
- CVE-2017-11445Critical
Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.
- CVE-2017-11444Critical
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
- CVE-2017-6013Critical
Subrion CMS version 4.0.5.10 has an SQL injection vulnerability in the admin/database module via the query parameter.
- CVE-2017-5543Critical
In Subrion CMS version 4.0.5, a vulnerability allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
- CVE-2026-72604Medium
Path traversal vulnerability in Intelliants Subrion CMS through 4.2.1. Authenticated administrators can delete arbitrary files on the server via the admin panel file deletion endpoint, which passes a user-supplied file path directly to unlink() without sanitization.
Original NVD description (English source)
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.