Vulnerabilities (CVE)

Filtered by vendor Intelliants Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-18155 1 Intelliants 1 Subrion 2021-07-29 7.5 HIGH 9.8 CRITICAL
SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.
CVE-2017-6013 1 Intelliants 1 Subrion Cms 2019-03-12 7.5 HIGH 9.8 CRITICAL
Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
CVE-2017-5543 1 Intelliants 1 Subrion 2018-11-08 7.5 HIGH 9.8 CRITICAL
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
CVE-2017-11444 1 Intelliants 1 Subrion Cms 2017-07-20 7.5 HIGH 9.8 CRITICAL
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
CVE-2017-11445 1 Intelliants 1 Subrion Cms 2017-07-20 7.5 HIGH 9.8 CRITICAL
Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.