Sploitus

10 exploited vulnerabilities in Subsonic

Vulnerabilities with publicly known exploits

Vendors
Subsonic
With known exploits
10
Affected Subsonic versions
= 6.1.1, 6.1.5, 6.1.3

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2017-9414 4 exploits
CVSS 8.8 HIGH 2018-02-05FIX AVAILABLE
Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting VulnerabilitiesSubsonic 6.1.1 - Cross-Site Request Forgery Cross-Site Scripting
CVE-2017-9413 4 exploits
CVSS 8.8 HIGH 2017-07-25FIX AVAILABLE
Subsonic 6.1.1 - Server-Side Request Forgery VulnerabilitySubsonic 6.1.1 - Server-Side Request Forgery
CVE-2018-20228 2 exploits
CVSS 8.0 HIGH 2018-12-19FIX AVAILABLE
Subsonic v6.1.5 - Server Side Request Forgery & CSRFSubsonic v6.1.5 - Server Side Request Forgery & CSRF
CVE-2017-9415 4 exploits
CVSS 7.5 HIGH 2017-07-21
Subsonic 6.1.1 - Cross-Site Request Forgery VulnerabilitySubsonic 6.1.1 - Cross-Site Request Forgery
CVE-2017-9355 4 exploits
CVSS 7.4 HIGH 2017-06-07
Subsonic 6.1.1 - XML External Entity Injection VulnerabilitySubsonic 6.1.1 - XML External Entity Injection
CVE-2018-6014 2 exploits
CVSS 6.5 MEDIUM 2018-01-23FIX AVAILABLE
Subsonic v6.1.3 - Flash Cross-Domain Policy VulnerabilitySubsonic v6.1.3 - Flash Cross-Domain Policy Vulnerability
CVE-2018-14691
CVSS 6.1 MEDIUM 2018-09-21
CVE-2018-14690
CVSS 6.1 MEDIUM 2018-09-21FIX AVAILABLE
CVE-2018-14689
CVSS 6.1 MEDIUM 2018-09-21FIX AVAILABLE
CVE-2018-14688
CVSS 6.1 MEDIUM 2018-09-21