Vulnerabilities > Intelliants > Subrion CMS
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-08 | CVE-2021-41947 | SQL Injection vulnerability in Intelliants Subrion CMS 4.2.1 A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode. | 7.2 |
| 2021-08-05 | CVE-2020-22392 | Cross-site Scripting vulnerability in Intelliants Subrion CMS 4.2.2 Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file. | 5.4 |
| 2020-12-26 | CVE-2020-35437 | Cross-site Scripting vulnerability in Intelliants Subrion CMS 4.2.1 Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI. | 6.1 |
| 2020-11-10 | CVE-2019-7357 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.2.1 Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. | 8.8 |
| 2019-05-08 | CVE-2019-11406 | Cross-site Scripting vulnerability in Intelliants Subrion CMS 4.2.1 Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter. | 6.1 |
| 2019-04-15 | CVE-2017-18366 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.1.5 Subrion CMS 4.1.5 has CSRF in blog/delete/. | 8.8 |
| 2018-12-04 | CVE-2018-16631 | Cross-site Scripting vulnerability in Intelliants Subrion CMS 4.2.1 Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter. | 5.4 |
| 2018-12-04 | CVE-2018-16629 | Cross-site Scripting vulnerability in Intelliants Subrion CMS 4.2.1 panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. | 4.8 |
| 2018-11-21 | CVE-2018-19422 | Unrestricted Upload of File with Dangerous Type vulnerability in Intelliants Subrion CMS 4.2.1 /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. | 7.2 |
| 2017-07-19 | CVE-2017-11445 | SQL Injection vulnerability in Intelliants Subrion CMS Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array. | 9.8 |