github.com/intelliants/subrion issues | Ecosyste.ms: OpenCollective

RCE vulnerability in Subrion CMS 4.2.1

KingLann opened this issue 4 months ago

SQL Injection Vulnerability in Subrion 4.2.1

diyarsaadi opened this issue 10 months ago

Subrion SQL Injection ia.core.mysqli.php

diyarsaadi opened this issue 10 months ago

There is a RCE vulnerability

RuntimeBroker opened this issue about 1 year ago

Question regarding Subrion -- Community Edition/Demo

deehill opened this issue about 1 year ago

XSS

anh91 opened this issue over 1 year ago

Mass Assignment vulnerability

anh91 opened this issue over 1 year ago

Install Via Docker-Compose

TheAFKGamer10 opened this issue over 1 year ago

addthis need to remove

sashagar opened this issue over 1 year ago

PHP code not insert in the hooks

sashagar opened this issue over 1 year ago

Duplication in content

Reezaam opened this issue over 1 year ago

Menu items not saved.

sashagar opened this issue over 1 year ago

MySQL Tools in the admin part of the site

sashagar opened this issue over 1 year ago

<code> not work in install.xml

sashagar opened this issue over 1 year ago

Date added has not datetime format

sashagar opened this issue over 1 year ago

remove curly braces

sashagar opened this pull request over 1 year ago

Issue when try to install

rzaprianov opened this issue almost 2 years ago

Cross Site Scripting (XSS) in Members Add

sinemsahn opened this issue about 2 years ago

Cross Site Scripting (XSS) in Add Field Page

sinemsahn opened this issue about 2 years ago

Cross Site Scripting (XSS) in Configuration Page

sinemsahn opened this issue about 2 years ago

this is Cross Site Scripting (XSS)

able403 opened this issue about 3 years ago

Fatal error in admin dashboard

vbezruchkin opened this issue over 5 years ago

MySQL 8+ is not fully supported

agorshechnikov opened this issue about 6 years ago

Sql injection in /front/search.php

Balis0ng opened this issue over 6 years ago

Sql injection in /front/actions.php

Balis0ng opened this issue over 6 years ago

CSRF attack during adminer row update

vbezruchkin opened this issue almost 7 years ago

Database error.

spwebconnect opened this issue almost 7 years ago

No baseurl for admin dashboard

vbezruchkin opened this issue almost 7 years ago

Fields on the frontend aren't filtered properly

ghost opened this issue almost 7 years ago

Incorrect data sent when batch changing status in grid

ghost opened this issue almost 7 years ago

No way to perform additional checks on the add/edit pages in backend controller

ghost opened this issue almost 7 years ago

Make number fields display '0' value

ghost opened this issue about 7 years ago

Incorrect values in 'On expiration change status to' field

agorshechnikov opened this issue about 7 years ago

Incorrect working of modules with type=plugin

nearia opened this issue about 7 years ago

Incorrect processing of language & blog

vbezruchkin opened this issue about 7 years ago

Page title cannot be changed for certain menu on Edit menu page

agorshechnikov opened this issue about 7 years ago

Language phrases are not edited on Language page

agorshechnikov opened this issue about 7 years ago

Process positions function removes previously set positions

glebovsky opened this issue about 7 years ago

Keep copy of overwritten files

vbezruchkin opened this issue about 7 years ago

Review plugins that depend on items

vbezruchkin opened this issue about 7 years ago

Tree field value is not selected in Refine Search block

agorshechnikov opened this issue about 7 years ago

Define moduleName in item classes

vbezruchkin opened this issue about 7 years ago

Custom menu item

vbezruchkin opened this issue about 7 years ago

'Tree' type field saving issues

ghost opened this issue about 7 years ago

Request treated as a potential CSRF attack

Miraakol opened this issue about 7 years ago

CSRF Account Take Over Possible

9emin1 opened this issue about 7 years ago

Data in the grid needs to be HTML escaped

ghost opened this issue about 7 years ago

Implement DELETE requests support by storage fields

ghost opened this issue about 7 years ago

Implement correct search by 'Currency' type fields

ghost opened this issue about 7 years ago

CSRF Token Bypass because of code logic error.

Xmansec opened this issue about 7 years ago

Implement 'Field' API entity

ghost opened this issue about 7 years ago

SECURITY ISSUE - File Permissions on uploads and folders

CKENT0369 opened this issue about 7 years ago

Google Map Plugin not working for members

CKENT0369 opened this issue over 7 years ago

Comments Plugin 4.1 broken

CKENT0369 opened this issue over 7 years ago

Implement deleting images via API request

amalichev opened this issue over 7 years ago

Implement request rate limiting

ghost opened this issue over 7 years ago

CSRF Token Bypass which lead admin account takeover or admin access to normal user

rudSarkar opened this issue over 7 years ago

Search pages by title in admin part of the site

sashagar opened this issue over 7 years ago

Order attribute for block is ignored during template installation process

agorshechnikov opened this issue over 7 years ago

Search doesn't work for plugins

amalichev opened this issue over 7 years ago

Status is not saved if it's changed via Edit menu page

sashagar opened this issue over 7 years ago

Ajax call responses are only in default language

4unkur opened this issue over 7 years ago

Set as default package functionality doesn't work

4unkur opened this issue over 7 years ago

Properly escape HTML in debug output

ghost opened this issue over 7 years ago

Permissions issue

4unkur opened this issue over 7 years ago

Inconsistent page name in pages mgmt

ghost opened this issue over 7 years ago

Detect SSL without port

vbezruchkin opened this issue over 7 years ago

Multi language - New Page creation

smartey opened this issue over 7 years ago

Logout via API doesn't work.

amalichev opened this issue over 7 years ago

Primary language value is lost

vbezruchkin opened this issue over 7 years ago

Post payment routine executed twice if paid by internal system funds

ghost opened this issue over 7 years ago

'Flat Structure' category helper: implement slug validation

ghost opened this issue over 7 years ago

Change column type for text fields

ghost opened this issue over 7 years ago

Subcategories number in category removal confirmation dialog

ghost opened this issue over 7 years ago

Remove item from favorites when deleted

ghost opened this issue over 7 years ago

Items created by plugins don't have all features

sashagar opened this issue over 7 years ago

Images are saved with incorrect names if filename contains non latin chars

agorshechnikov opened this issue over 7 years ago

Drop Down List field doesn't work correctly.

amalichev opened this issue over 7 years ago

Values of tree field are not translated

sashagar opened this issue over 7 years ago

Improve phrases translation UI/UX

glebovsky opened this issue over 7 years ago

Copy value from default lang button doesn't work for fields with CKEditor

agorshechnikov opened this issue over 7 years ago

Phrases for fields are not added after activation of plugin for item

agorshechnikov opened this issue over 7 years ago

Images are lost after a validation.

amalichev opened this issue over 7 years ago

Multilingual custom configs get processed incorrectly

ghost opened this issue almost 8 years ago

Adapt upgrades system to modules instead of plugins/packages

ghost opened this issue almost 8 years ago

Field relations reset every time any field edited

ghost opened this issue almost 8 years ago

Review hooks inclusion