CVE-2019-11406

Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.

• CWE-79

• https://github.com/intelliants/subrion/commits/developPatch, Third Party Advisory
• https://github.com/intelliants/subrion/issues/821Exploit, Third Party Advisory
• https://github.com/intelliants/subrion/commits/developPatch, Third Party Advisory
• https://github.com/intelliants/subrion/issues/821Exploit, Third Party Advisory

Published

May 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11400An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-65…9.8
• CVE-2019-11401A issue was discovered in SiteServer CMS 6.9.0. It allows re…
• CVE-2019-11402In Gradle Enterprise before 2018.5.3, Build Cache Nodes did …9.8
• CVE-2019-11403In Gradle Enterprise before 2018.5.2, Build Cache Nodes woul…9.8
• CVE-2019-11404arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts …8.1
• CVE-2019-11405OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012…8.1
• CVE-2019-11407app/operator_panel/index_inc.php in the Operator Panel modul…
• CVE-2019-11408XSS in app/operator_panel/index_inc.php in the Operator Pane…
• CVE-2019-11409app/operator_panel/exec.php in the Operator Panel module in …8.8
• CVE-2019-1141A remote code execution vulnerability exists in the way that…4.2
• CVE-2019-11410app/backup/index.php in the Backup Module in FusionPBX 4.4.3…
• CVE-2019-11411An issue was discovered in Artifex MuJS 1.0.5. The Number#to…