Intelliants vulnerabilities
We track 2 vulnerabilities in Intelliants products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Intelliants vulnerabilities
- 7.2 High severity
subrion: Improper Neutralization of Special Elements used in an SQL Command
Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not pr
- 9.8 Critical severity
Subrion: Improper Neutralization of Special Elements used in an SQL Command
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the