Skip to contentIntelliants Subrion vulnerabilities
- intelliants subrion cmsIntelliants Subrion CMS Login Page login.php authorize redirectCVE-2026-967735.3 Medium
- intelliants subrion cmsIntelliants Subrion CMS actions.json assign-owner information disclosureCVE-2026-967726.9 Medium
- intelliants subrion cmsIntelliants Subrion CMS - Path TraversalCVE-2026-726046.5 Medium
- intelliants subrionSubrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort ParameterCVE-2026-712927.2 High
- intelliants subrion cmsIntelliants Subrion CMS Blocks Endpoint cross site scriptingCVE-2026-122024.8 Medium
- intelliants subrion cmsSubrion CMS vulnerable to cross-site scriptingCVE-2025-709586.1 Medium
- intelliants subrion cmsSubrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query toolCVE-2025-565563.8 Low
- intelliants subrionWithdrawn Advisory: Subrion CMS vulnerable to SQL InjectionCVE-2024-25400Disputed9.8 Critical
- intelliants subrion cmsSubrion CMS vulnerable to Cross Site ScriptingCVE-2024-253996.1 Medium
- intelliants subrion, subrion cms +1 moreSubrion remote command execution vulnerabilityCVE-2023-469478.8 High
- intelliants subrion cmsSubrion CMS vulnerable to Cross-site ScriptingCVE-2023-43875Public exploit6.1 Medium
- intelliants subrionSubrion CMS Cross-site Scripting vulnerabilityCVE-2023-438845.4 Medium
- intelliants subrionSubrion CMS XSS in /panel/configuration/financial/CVE-2023-438305.4 Medium
- intelliants subrionSubrion CMS Cross-site Scripting vulnerability in /panel/languagesCVE-2023-438285.4 Medium
- intelliants subrion cmsSubrion CMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-431216.1 Medium
- intelliants subrion cmsSubrion CMS is vulnerable to Cross-Site Scripting (XSS)CVE-2022-431206.1 Medium
- intelliants subrion cmsSubrion CMS 4.2.1 vulnerable to cross-site scripting in admin panelCVE-2022-370594.8 Medium
- intelliants subrion cmsCross site scripting in intelliants/subrionCVE-2021-415025.4 Medium
- intelliants subrionSubrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` pluginCVE-2021-419485.4 Medium
- intelliants subrion cmsRemote code execution in SubrionCVE-2021-434648.8 High
- intelliants subrion cmsCross-site Scripting in intelliants/subrionCVE-2020-18325Public exploit6.1 Medium
- intelliants subrion cmsCross-site Scripting in Subrion CMSCVE-2020-18324Public exploit6.1 Medium
- intelliants subrion cmsCross Site Request Forgery in intelliants/subrionCVE-2020-18326Public exploit8.8 High
- intelliants subrion cmsA Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page...CVE-2021-437244.8 Medium
- intelliants subrion cmsA SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.CVE-2021-419477.2 High
- intelliants subrionSubrion Cross-Site Scripting (XSS) vulnerabilityCVE-2020-22330Fix available6.1 Medium
- intelliants subrion cmsCross Site Scripting in Subrion CMSCVE-2020-223925.4 Medium
- intelliants subrionSQL Injection in Subrion CMSCVE-2020-181559.8 Critical
- intelliants subrionsubrion CMS Cross Site Scripting (XSS) vulnerabilityCVE-2020-237616.1 Medium
- intelliants subrion cmsSubrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter...CVE-2020-35437Public exploit6.1 Medium
- intelliants subrion cmsSubrion CMS CSRF VulnerabilityCVE-2019-7357Public exploit8.8 High
- intelliants subrionSubrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.CVE-2019-7356Public exploit5.4 Medium
- intelliants subrionSubrion CMS Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2019-203908.1 High
- intelliants subrionSubrion CMS XSSCVE-2019-203896.1 Medium
- intelliants subrionSession Fixation in Subrion CMSCVE-2020-124676.5 Medium
- intelliants subrionSubrion CMS CSV injection via Export LanguageCVE-2020-124687.8 High
- intelliants subrionSubrion CMS PHP Object InjectionCVE-2020-124696.5 Medium
- intelliants subrionSubrion CMS CSRF VulnerabilityCVE-2018-21037Fix available8.8 High
- intelliants subrionSubrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an ...CVE-2019-17225Public exploit5.4 Medium
- intelliants subrionSubrion CMS XSSCVE-2018-11317Fix available6.1 Medium
- intelliants subrion cmsSubrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.CVE-2019-114066.1 Medium
- intelliants subrion cmsSubrion CMS vulnerable to CSRF in blog/deleteCVE-2017-18366Fix available8.8 High
- intelliants subrion cmsSubrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter.CVE-2018-166315.4 Medium
- intelliants subrion cmsSubrion CMS XSSCVE-2018-166294.8 Medium
- intelliants subrion cmsSubrion CMS RCE VulnerabilityCVE-2018-19422Public exploitFix availableEPSS 64.5%7.2 High
- intelliants subrionSubrion CMS Stored Cross-site Scripting (XSS)CVE-2018-155636.1 Medium
- intelliants subrionSubrion Cross-site Scripting (XSS)CVE-2018-163274.8 Medium
- intelliants subrionSubrion CMS Cross-site ScriptingCVE-2018-14840Public exploitFix available6.1 Medium
- intelliants subrionSubrion CMS CSRF VulnerabilityCVE-2017-15063Fix available8.8 High
- intelliants subrion cmsSubrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST...CVE-2017-114459.8 Critical
- Show olderLoading…