Skip to content
OpenAdvisories

Vendor

Intelliants

5 known vulnerabilities.

Products

Subrion CMS 4 subrion 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-71292

    Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter

    Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not p…

    Intelliants subrion