Intelliants Subrion 4.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:intelliants:subrion:4.2.1:*:*:*:*:*:*:*
part: a version: 4.2.1 update: *
| Vendor | Intelliants (9a16356f-578e-53eb-80d8-4986d008ffd2) |
|---|---|
| Product | Subrion (f6c1d03c-5c54-5551-acbc-a7f5ea672965) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:dockerintelliants/subrion |
purl2cpe | 2026-06-01 10:16:57.248994 |
pkg:github/intelliants/subrion |
purl2cpe | 2026-06-01 10:16:57.248996 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25400 |
vulnerable | 2026-06-08 06:31:22.879608 |
Details available
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not present in the file.
Published: 2024-02-27T00:00:00.000Z
Updated: 2025-05-15T18:05:59.752Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46947 |
vulnerable | 2026-06-08 06:14:23.690639 |
Details available
Subrion 4.2.1 has a remote command execution vulnerability in the backend.
Published: 2023-11-03T00:00:00.000Z
Updated: 2024-09-06T16:04:38.285Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43884 |
vulnerable | 2026-06-08 06:12:38.141296 |
Details available
A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter.
Published: 2023-09-28T00:00:00.000Z
Updated: 2024-09-23T19:15:42.943Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43830 |
vulnerable | 2026-06-08 06:12:38.080357 |
Details available
A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.
Published: 2023-09-27T00:00:00.000Z
Updated: 2024-09-24T14:19:56.216Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43828 |
vulnerable | 2026-06-08 06:12:38.079835 |
Details available
A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
Published: 2023-09-27T00:00:00.000Z
Updated: 2024-09-24T14:20:21.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22330 |
vulnerable | 2026-06-08 05:22:31.393484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18155 |
vulnerable | 2026-06-08 05:20:56.870533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12468 |
vulnerable | 2026-06-08 05:17:58.233349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12467 |
vulnerable | 2026-06-08 05:17:58.232818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7356 |
vulnerable | 2026-06-08 05:14:14.308053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20390 |
vulnerable | 2026-06-08 05:13:40.551686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20389 |
vulnerable | 2026-06-08 05:13:40.551288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17225 |
vulnerable | 2026-06-08 05:13:10.147996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16327 |
vulnerable | 2026-06-08 05:11:04.708097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15563 |
vulnerable | 2026-06-08 05:10:55.097435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14840 |
vulnerable | 2026-06-08 05:10:53.589985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.