Security Advisory
CVE-2017-5543
9.8
CRITICAL
Vulnerability Description
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
Published Date
January 20, 2017
Official Source
NIST NVD Advisory