CVE-2017-5543

includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.

• CWE-94

• http://www.securityfocus.com/bid/95688Third Party Advisory, VDB Entry
• https://github.com/intelliants/subrion/issues/297Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95688Third Party Advisory, VDB Entry
• https://github.com/intelliants/subrion/issues/297Issue Tracking, Patch, Third Party Advisory

Published

Jan 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5536The GridServer Broker, and GridServer Director components of…6.3
• CVE-2017-5537The password reset form in Weblate before 2.10.1 provides di…
• CVE-2017-5538The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core…
• CVE-2017-5539The patch for directory traversal (CVE-2017-5480) in b2evolu…
• CVE-2017-5541Directory traversal vulnerability in template/usererror.miss…
• CVE-2017-5542Cross-site scripting (XSS) vulnerability in template/usererr…
• CVE-2017-5544An issue was discovered on FiberHome Fengine S5800 switches …5.9
• CVE-2017-5545The main function in plistutil.c in libimobiledevice libplis…
• CVE-2017-5546The freelist-randomization feature in mm/slab.c in the Linux…7.8
• CVE-2017-5547drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4…7.8
• CVE-2017-5548drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x bef…
• CVE-2017-5549The klsi_105_get_line_state function in drivers/usb/serial/k…