GCVE - cpe:2.3:a:intelliants:subrion_cms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:intelliants:subrion_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Intelliants (`9a16356f-578e-53eb-80d8-4986d008ffd2`)
Product	Subrion Cms (`dbf50407-496c-5888-a914-9c1af6cce91d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/intelliants/subrion`	purl2cpe	2026-06-01 10:16:57.261498

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-12202`	vulnerable	2026-07-29 00:23:32.155400	Intelliants Subrion CMS Blocks Endpoint cross site scripting LOW (2.4) A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component Blocks Endpoint. Such manipulation of the argument CSS class name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-06-15T00:45:08.592Z Updated: 2026-06-16T03:36:25.411Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/370845 https://vuldb.com/vuln/370845/cti https://vuldb.com/cve/CVE-2026-12202 https://vuldb.com/submit/830013 https://karinagante.github.io/cve-2026-12202/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43724`	vulnerable	2026-06-08 05:36:43.899574	Details available A Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file. Published: 2022-02-23T18:31:30.000Z Updated: 2024-08-04T04:03:08.648Z Open on db.gcve.eu Reference links https://github.com/intelliants/subrion/issues/890	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11445`	vulnerable	2026-06-08 05:08:37.770677	Details available Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array. Published: 2017-07-19T07:00:00.000Z Updated: 2024-08-05T18:12:39.908Z Open on db.gcve.eu Reference links https://github.com/intelliants/subrion/issues/480	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11444`	vulnerable	2026-06-08 05:08:37.770284	Details available Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array. Published: 2017-07-19T07:00:00.000Z Updated: 2024-08-05T18:12:39.867Z Open on db.gcve.eu Reference links https://github.com/intelliants/subrion/issues/479	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4129`	vulnerable	2026-06-08 05:06:39.222019	Details available SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie. Published: 2015-07-05T10:00:00.000Z Updated: 2024-08-06T06:04:02.982Z Open on db.gcve.eu Reference links http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/ http://www.kb.cert.org/vuls/id/110532 http://www.securityfocus.com/bid/74570	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4773`	vulnerable	2026-06-08 05:02:52.599499	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4772`	vulnerable	2026-06-08 05:02:52.598995	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4771`	vulnerable	2026-06-08 05:02:52.596590	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.