İçeriğe atla
Noroxi

Intelliants kayıtları

intelliants üreticisine ait 65 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,5
Pre-auth RCE
10
Düzeltme kaydı olan
%15,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

65 kayıt
  • CVE-2018-19422
    47Planlayın

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess fi

    YüksekCVSS 7,2SilahlaştırılmışEPSS %64

    intelliants · subrion cms21 Kas 2018

  • CVE-2017-11444
    43Planlayın

    Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    intelliants · subrion cms19 Tem 2017

  • CVE-2017-5543
    40Planlayın

    includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serializ

    KritikCVSS 9,8İstismar yokEPSS %2

    intelliants · subrion20 Oca 2017

  • CVE-2017-6013
    39İzleyin

    Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    intelliants · subrion cms26 Mar 2017

  • CVE-2020-18155
    39İzleyin

    SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.

    KritikCVSS 9,8İstismar yokEPSS %1

    intelliants · subrion14 Tem 2021

  • CVE-2017-11445
    39İzleyin

    Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.

    KritikCVSS 9,8İstismar yokEPSS %1

    intelliants · subrion cms19 Tem 2017

  • CVE-2024-25400
    39İzleyin

    Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.

    KritikCVSS 9,8İstismar yokEPSS %0

    intelliants · subrion27 Şub 2024

  • CVE-2020-18326
    36İzleyin

    Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    intelliants · subrion cms4 Mar 2022

  • CVE-2021-43464
    35İzleyin

    A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is mod

    YüksekCVSS 8,8İstismar yokEPSS %1

    intelliants · subrion cms4 Nis 2022

  • CVE-2019-7357
    35İzleyin

    Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    intelliants · subrion cms10 Kas 2020

  • CVE-2023-46947
    35İzleyin

    Subrion 4.2.1 has a remote command execution vulnerability in the backend.

    YüksekCVSS 8,8İstismar yokEPSS %1

    intelliants · subrion3 Kas 2023

  • CVE-2017-6069
    35İzleyin

    Subrion CMS 4.0.5 has CSRF in admin/blog/add/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion cms26 Mar 2017

  • CVE-2017-18366
    35İzleyin

    Subrion CMS 4.1.5 has CSRF in blog/delete/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion cms15 Nis 2019

  • CVE-2017-6068
    35İzleyin

    Subrion CMS 4.0.5 has CSRF in admin/blocks/add/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion cms26 Mar 2017

  • CVE-2017-6066
    35İzleyin

    Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion cms26 Mar 2017

  • CVE-2017-15063
    35İzleyin

    There are CSRF vulnerabilities in Subrion CMS 4.1.x through 4.1.5, and before 4.2.0, because of a logic error.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion6 Eki 2017

  • CVE-2018-21037
    35İzleyin

    Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion17 Mar 2020

  • CVE-2017-6002
    35İzleyin

    Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    intelliants · subrion cms26 Mar 2017

  • CVE-2019-20390
    32İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the s

    YüksekCVSS 8,1İstismar yokEPSS %0

    intelliants · subrion15 May 2020

  • CVE-2012-4772
    31İzleyin

    SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    intelliants · subrion cms22 Eki 2012

  • CVE-2011-5212
    31İzleyin

    SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) us

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    intelliants · subrion cms22 Eki 2012

  • CVE-2020-12468
    31İzleyin

    Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language.

    YüksekCVSS 7,8İstismar yokEPSS %0

    intelliants · subrion29 Nis 2020

  • CVE-2012-4773
    28İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication o

    OrtaCVSS 6,8Kavram kanıtıEPSS %3

    intelliants · subrion cms22 Eki 2012

  • CVE-2009-1659
    28İzleyin

    Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restriction

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    intelliants · elitius18 May 2009

  • CVE-2021-41947
    28İzleyin

    A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.

    YüksekCVSS 7,2İstismar yokEPSS %1

    intelliants · subrion cms8 Eki 2021