Known vulnerabilities in Subrion CMS - page 2

Vendor: Intelliants
Software: Subrion CMS
Software CPE: cpe:2.3:a:intelliants:subrion:*:*:*:*:*:*:*:*
Website: https://intelliants.com/
Total vulnerabilities: 33
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Subrion CMS Subrion CMS is affected by 33 known vulnerabilities: 3 high, 10 medium, 20 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11317		 CWE-79 Low
No
No
 4.1.4 09.07.2019 SB2017051813
#VU39369 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6002		 CWE-79 Low
No
No
 - 27.03.2017 SB2017032709
#VU39371 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-6013		 CWE-89 High
No
No
 - 27.03.2017 SB2017032709
#VU39372 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6066		 CWE-79 Low
No
No
 - 27.03.2017 SB2017012013
#VU39373 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6068		 CWE-79 Low
No
No
 - 27.03.2017 SB2017012013
#VU39374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6069		 CWE-79 Low
No
No
 - 27.03.2017 SB2017012013
#VU39814 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-5543		 CWE-94 High
No
No
 - 20.01.2017 SB2017012013
#VU43381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-5452		 CWE-79 Low
Available
No
 - 23.10.2012 SB2012102301
#VU43382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4771		 CWE-79 Low
Available
No
 - 23.10.2012 SB2012102301
#VU43383 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-4772		 CWE-89 Medium
Available
No
 - 23.10.2012 SB2012102301
#VU43384 - Cross-Site Request Forgery (CSRF)
CVE-2012-4773		 CWE-352 Medium
Available
No
 - 23.10.2012 SB2012102301
#VU43392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-5211		 CWE-79 Low
Available
No
 - 23.10.2012 SB2012102308
#VU43393 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-5212		 CWE-89 Medium
Available
No
 - 23.10.2012 SB2012102308


Showing elements 21 - 40 out of 33