Intelliants

intelliants

65 CVEs • 4 products

Products (4)

Click to collapse

Toggle

CVEs (65)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-70958 1Intelliants 1Subrion Cms Jun 17, 2026 Feb 2, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted...Show more Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.Show less
CVE-2025-56556 1Intelliants 1Subrion Cms Jun 17, 2026 Sep 11, 2025 N/A· v4 3.8 LOW· v3 N/A· v2 An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the cont...Show more An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool.Show less
CVE-2024-25400 1Intelliants 1Subrion Jun 17, 2026 Feb 27, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechani...Show more Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not present in the file.Show less
CVE-2024-25399 1Intelliants 1Subrion Cms Jun 17, 2026 Feb 27, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.
CVE-2023-46947 1Intelliants 1Subrion Jun 17, 2026 Nov 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Subrion 4.2.1 has a remote command execution vulnerability in the backend.
CVE-2023-43875 1Intelliants 1Subrion Cms Jun 17, 2026 Oct 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminuse...Show more Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.Show less
CVE-2023-43884 1Intelliants 1Subrion Jun 17, 2026 Sep 28, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' param...Show more A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter.Show less
CVE-2023-43830 1Intelliants 1Subrion Jun 17, 2026 Sep 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum depos...Show more A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.Show less
CVE-2023-43828 1Intelliants 1Subrion Jun 17, 2026 Sep 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
CVE-2022-43121 1Intelliants 1Subrion Cms Jun 17, 2026 Nov 9, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field.
CVE-2022-43120 1Intelliants 1Subrion Cms Jun 17, 2026 Nov 9, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field defa...Show more A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.Show less
CVE-2022-37059 1Intelliants 1Subrion Cms Jun 17, 2026 Aug 29, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field
CVE-2021-41502 1Intelliants 1Subrion Cms Jun 17, 2026 Jun 11, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or ad...Show more An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.Show less
CVE-2021-41948 1Intelliants 1Subrion Jun 17, 2026 Apr 29, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
CVE-2021-43464 1Intelliants 1Subrion Cms Jun 17, 2026 Apr 4, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().
CVE-2020-18326 1Intelliants 1Subrion Cms Jul 9, 2026 Mar 4, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victi...Show more Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.Show less
CVE-2020-18325 1Intelliants 1Subrion Cms Jul 9, 2026 Mar 4, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.
CVE-2020-18324 1Intelliants 1Subrion Cms Jul 9, 2026 Mar 4, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.
CVE-2021-43724 1Intelliants 1Subrion Cms Jun 17, 2026 Feb 24, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 A Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file.
CVE-2021-41947 1Intelliants 1Subrion Cms Jun 17, 2026 Oct 8, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.

12 3 4 Next