Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/intelliants/subrion@4.2.1
Typecomposer
Namespaceintelliants
Namesubrion
Version4.2.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-3bwe-5b6b-a7e2
vulnerability_id VCID-3bwe-5b6b-a7e2
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14835
reference_id
reference_type
scores
0
value 0.00206
scoring_system epss
scoring_elements 0.42778
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14835
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/commit/a33a224c6c9e25144d828f92f6141c719215094b
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/a33a224c6c9e25144d828f92f6141c719215094b
3
reference_url https://github.com/intelliants/subrion/issues/760
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/760
4
reference_url https://github.com/intelliants/subrion/pull/763
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/pull/763
5
reference_url https://github.com/intelliants/subrion/pull/763/commits
reference_id
reference_type
scores
url https://github.com/intelliants/subrion/pull/763/commits
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14835
reference_id CVE-2018-14835
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14835
7
reference_url https://github.com/advisories/GHSA-c8mg-wp7h-f2pf
reference_id GHSA-c8mg-wp7h-f2pf
reference_type
scores
url https://github.com/advisories/GHSA-c8mg-wp7h-f2pf
fixed_packages
aliases CVE-2018-14835, GHSA-c8mg-wp7h-f2pf
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3bwe-5b6b-a7e2
1
url VCID-3h1n-dvmt-5qhz
vulnerability_id VCID-3h1n-dvmt-5qhz
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43830
reference_id
reference_type
scores
0
value 0.0027
scoring_system epss
scoring_elements 0.50662
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43830
1
reference_url https://github.com/al3zx/xss_financial_subrion_4.2.1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T14:19:48Z/
url https://github.com/al3zx/xss_financial_subrion_4.2.1
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43830
reference_id CVE-2023-43830
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43830
4
reference_url https://github.com/advisories/GHSA-q832-2275-rfqh
reference_id GHSA-q832-2275-rfqh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q832-2275-rfqh
fixed_packages
aliases CVE-2023-43830, GHSA-q832-2275-rfqh
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3h1n-dvmt-5qhz
2
url VCID-3hbd-spm4-2kaz
vulnerability_id VCID-3hbd-spm4-2kaz
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43875
reference_id
reference_type
scores
0
value 0.026
scoring_system epss
scoring_elements 0.85872
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43875
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/sromanhu/CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-12T19:49:31Z/
url https://github.com/sromanhu/CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
3
reference_url https://github.com/sromanhu/Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-12T19:49:31Z/
url https://github.com/sromanhu/Subrion-CMS-Reflected-XSS---Installation/blob/main/README.md
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43875
reference_id CVE-2023-43875
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43875
5
reference_url https://github.com/advisories/GHSA-646r-8fcc-p82r
reference_id GHSA-646r-8fcc-p82r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-646r-8fcc-p82r
fixed_packages
aliases CVE-2023-43875, GHSA-646r-8fcc-p82r
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3hbd-spm4-2kaz
3
url VCID-44kx-4nnh-4bdf
vulnerability_id VCID-44kx-4nnh-4bdf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-7357
reference_id
reference_type
scores
0
value 0.01618
scoring_system epss
scoring_elements 0.82122
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-7357
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/ngpentest007/CVE-2019-7357/blob/main/Subrion_4.2.1%20-%20CVE-2019-7357.pdf
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ngpentest007/CVE-2019-7357/blob/main/Subrion_4.2.1%20-%20CVE-2019-7357.pdf
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-7357
reference_id CVE-2019-7357
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-7357
4
reference_url https://github.com/advisories/GHSA-5mh2-82g9-72jv
reference_id GHSA-5mh2-82g9-72jv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5mh2-82g9-72jv
fixed_packages
aliases CVE-2019-7357, GHSA-5mh2-82g9-72jv
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-44kx-4nnh-4bdf
4
url VCID-51fa-htgd-pkd7
vulnerability_id VCID-51fa-htgd-pkd7
summary 
Cross-site Scripting
Cross-Site Scripting (XSS) vulnerability in Subrion via the title when adding a page.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-22330
reference_id
reference_type
scores
0
value 0.00201
scoring_system epss
scoring_elements 0.42096
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-22330
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/commit/06950c2f9c4aa69e323cbdd141beabb6a9273ca4
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/06950c2f9c4aa69e323cbdd141beabb6a9273ca4
3
reference_url https://github.com/intelliants/subrion/commit/0e9180d2330a00b1ce8e7ec2e92e0a4e0612f1a9
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/0e9180d2330a00b1ce8e7ec2e92e0a4e0612f1a9
4
reference_url https://github.com/intelliants/subrion/issues/850
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/850
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-22330
reference_id CVE-2020-22330
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-22330
6
reference_url https://github.com/advisories/GHSA-jj94-j4r3-5gr4
reference_id GHSA-jj94-j4r3-5gr4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jj94-j4r3-5gr4
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.2
purl pkg:composer/intelliants/subrion@4.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.2
aliases CVE-2020-22330, GHSA-jj94-j4r3-5gr4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-51fa-htgd-pkd7
5
url VCID-7yej-24pb-d3dm
vulnerability_id VCID-7yej-24pb-d3dm
summary 
Cross-site Scripting
`_core/admin/pages/add/` in Subrion CMS has XSS via the `titles[en]` parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15563
reference_id
reference_type
scores
0
value 0.0024
scoring_system epss
scoring_elements 0.47421
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15563
1
reference_url https://cxsecurity.com/issue/WLB-2018090261
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cxsecurity.com/issue/WLB-2018090261
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15563
reference_id CVE-2018-15563
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15563
fixed_packages
aliases CVE-2018-15563, GHSA-6wc4-v4v5-3m82
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7yej-24pb-d3dm
6
url VCID-8g7b-wfgz-77f1
vulnerability_id VCID-8g7b-wfgz-77f1
summary 
Cross-site Scripting
`uploads/.htaccess` in Subrion CMS allows XSS because it does not block `.html` file uploads.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14840
reference_id
reference_type
scores
0
value 0.03066
scoring_system epss
scoring_elements 0.86966
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14840
1
reference_url https://github.com/intelliants/subrion/commit/b12e287d3814c0f2d0b1892f95fc0190972d2ba5
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/b12e287d3814c0f2d0b1892f95fc0190972d2ba5
2
reference_url https://github.com/intelliants/subrion/commit/cb10ac2294cb2c3a6d2159f9a2bb8c58a2a10a47
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/cb10ac2294cb2c3a6d2159f9a2bb8c58a2a10a47
3
reference_url https://github.com/intelliants/subrion/issues/773
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/773
4
reference_url https://www.exploit-db.com/exploits/45150
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45150
5
reference_url https://www.exploit-db.com/exploits/45150/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/45150/
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/45150.txt
reference_id CVE-2018-14840
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/45150.txt
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14840
reference_id CVE-2018-14840
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14840
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.2
purl pkg:composer/intelliants/subrion@4.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.2
aliases CVE-2018-14840, GHSA-vhqr-3gr2-7px9
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8g7b-wfgz-77f1
7
url VCID-8gvw-wym4-qufa
vulnerability_id VCID-8gvw-wym4-qufa
summary SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-18155
reference_id
reference_type
scores
0
value 0.00261
scoring_system epss
scoring_elements 0.49643
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-18155
1
reference_url https://github.com/intelliants/subrion/commit/c29cd72d07ca8cf6eba6f6d4496ad97d0c4d2be9
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/c29cd72d07ca8cf6eba6f6d4496ad97d0c4d2be9
2
reference_url https://github.com/intelliants/subrion/issues/817
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/817
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-18155
reference_id CVE-2020-18155
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-18155
4
reference_url https://github.com/advisories/GHSA-7q44-gfvq-6g93
reference_id GHSA-7q44-gfvq-6g93
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7q44-gfvq-6g93
fixed_packages
aliases CVE-2020-18155, GHSA-7q44-gfvq-6g93
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8gvw-wym4-qufa
8
url VCID-8n55-g9s6-5qbz
vulnerability_id VCID-8n55-g9s6-5qbz
summary
references
0
reference_url http://packetstormsecurity.com/files/157700/Subrion-CMS-4.2.1-Cross-Site-Request-Forgery.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157700/Subrion-CMS-4.2.1-Cross-Site-Request-Forgery.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-20390
reference_id
reference_type
scores
0
value 0.00247
scoring_system epss
scoring_elements 0.48112
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-20390
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-20390
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-20390
fixed_packages
aliases CVE-2019-20390, GHSA-c4wx-3x5q-hf4w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8n55-g9s6-5qbz
9
url VCID-94z6-as1s-pkem
vulnerability_id VCID-94z6-as1s-pkem
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-22392
reference_id
reference_type
scores
0
value 0.00185
scoring_system epss
scoring_elements 0.40114
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-22392
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/issues/868
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/868
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-22392
reference_id CVE-2020-22392
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-22392
4
reference_url https://github.com/advisories/GHSA-hxj6-v58r-cqv3
reference_id GHSA-hxj6-v58r-cqv3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hxj6-v58r-cqv3
fixed_packages
aliases CVE-2020-22392, GHSA-hxj6-v58r-cqv3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-94z6-as1s-pkem
10
url VCID-9fac-c1gc-jbft
vulnerability_id VCID-9fac-c1gc-jbft
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-43121
reference_id
reference_type
scores
0
value 0.00673
scoring_system epss
scoring_elements 0.71746
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-43121
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/issues/895
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-01T15:32:36Z/
url https://github.com/intelliants/subrion/issues/895
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-43121
reference_id CVE-2022-43121
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-43121
4
reference_url https://github.com/advisories/GHSA-jrvr-gmqv-hgrh
reference_id GHSA-jrvr-gmqv-hgrh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jrvr-gmqv-hgrh
fixed_packages
aliases CVE-2022-43121, GHSA-jrvr-gmqv-hgrh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9fac-c1gc-jbft
11
url VCID-9hkc-qw4n-t7at
vulnerability_id VCID-9hkc-qw4n-t7at
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-43120
reference_id
reference_type
scores
0
value 0.00626
scoring_system epss
scoring_elements 0.70546
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-43120
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/issues/894
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-01T14:10:58Z/
url https://github.com/intelliants/subrion/issues/894
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-43120
reference_id CVE-2022-43120
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-43120
4
reference_url https://github.com/advisories/GHSA-3wmg-28v9-8hf6
reference_id GHSA-3wmg-28v9-8hf6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3wmg-28v9-8hf6
fixed_packages
aliases CVE-2022-43120, GHSA-3wmg-28v9-8hf6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9hkc-qw4n-t7at
12
url VCID-abws-hvpw-myfy
vulnerability_id VCID-abws-hvpw-myfy
summary 
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Subrion 4.2.1 has a remote command execution vulnerability in the backend.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-46947
reference_id
reference_type
scores
0
value 0.01861
scoring_system epss
scoring_elements 0.83383
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-46947
1
reference_url https://github.com/intelliants/subrion/issues/909
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-06T16:02:20Z/
url https://github.com/intelliants/subrion/issues/909
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-46947
reference_id CVE-2023-46947
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-46947
3
reference_url https://github.com/advisories/GHSA-2x28-c7j7-23gv
reference_id GHSA-2x28-c7j7-23gv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2x28-c7j7-23gv
fixed_packages
aliases CVE-2023-46947, GHSA-2x28-c7j7-23gv
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-abws-hvpw-myfy
13
url VCID-by36-7n26-g7cc
vulnerability_id VCID-by36-7n26-g7cc
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16629
reference_id
reference_type
scores
0
value 0.00321
scoring_system epss
scoring_elements 0.55426
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16629
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/commit/fbc29ddb29e9c9732695e25ad2c22e038eed6385
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/fbc29ddb29e9c9732695e25ad2c22e038eed6385
3
reference_url https://github.com/intelliants/subrion/issues/777
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/777
4
reference_url https://github.com/security-breachlock/CVE-2018-16629/blob/master/subrion_cms.pdf
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/security-breachlock/CVE-2018-16629/blob/master/subrion_cms.pdf
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16629
reference_id CVE-2018-16629
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16629
6
reference_url https://github.com/advisories/GHSA-mxv3-qcmf-r6wj
reference_id GHSA-mxv3-qcmf-r6wj
reference_type
scores
url https://github.com/advisories/GHSA-mxv3-qcmf-r6wj
fixed_packages
aliases CVE-2018-16629, GHSA-mxv3-qcmf-r6wj
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-by36-7n26-g7cc
14
url VCID-cjhs-mtaa-7kdb
vulnerability_id VCID-cjhs-mtaa-7kdb
summary 
Cross-site Scripting
There is Stored XSS in Subrion via the admin panel URL configuration.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16327
reference_id
reference_type
scores
0
value 0.00219
scoring_system epss
scoring_elements 0.44499
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16327
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/commit/ec8e6e8984eeebfaf0d8022f4c07aa508624ee18
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/ec8e6e8984eeebfaf0d8022f4c07aa508624ee18
3
reference_url https://github.com/intelliants/subrion/issues/771
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/771
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16327
reference_id CVE-2018-16327
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16327
fixed_packages
aliases CVE-2018-16327, GHSA-9738-c49q-4rgc
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cjhs-mtaa-7kdb
15
url VCID-ekj6-hqpd-5ybq
vulnerability_id VCID-ekj6-hqpd-5ybq
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-18325
reference_id
reference_type
scores
0
value 0.01709
scoring_system epss
scoring_elements 0.82644
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-18325
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/hamm0nz/CVE-2020-18325
reference_id CVE-2020-18325
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hamm0nz/CVE-2020-18325
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-18325
reference_id CVE-2020-18325
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-18325
4
reference_url https://github.com/advisories/GHSA-pcwq-7wrw-r8jv
reference_id GHSA-pcwq-7wrw-r8jv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pcwq-7wrw-r8jv
fixed_packages
aliases CVE-2020-18325, GHSA-pcwq-7wrw-r8jv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ekj6-hqpd-5ybq
16
url VCID-f7sw-fp56-hudc
vulnerability_id VCID-f7sw-fp56-hudc
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12467
reference_id
reference_type
scores
0
value 0.00285
scoring_system epss
scoring_elements 0.52177
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12467
1
reference_url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-12467
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-12467
3
reference_url https://github.com/advisories/GHSA-qpxw-6473-ppww
reference_id GHSA-qpxw-6473-ppww
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qpxw-6473-ppww
fixed_packages
aliases CVE-2020-12467, GHSA-qpxw-6473-ppww
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f7sw-fp56-hudc
17
url VCID-fc5n-dcez-93fn
vulnerability_id VCID-fc5n-dcez-93fn
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41948
reference_id
reference_type
scores
0
value 0.00191
scoring_system epss
scoring_elements 0.40876
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41948
1
reference_url https://github.com/intelliants/subrion-plugin-contact_us
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion-plugin-contact_us
2
reference_url https://github.com/intelliants/subrion-plugin-contact_us/issues/8
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion-plugin-contact_us/issues/8
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41948
reference_id CVE-2021-41948
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-41948
4
reference_url https://github.com/advisories/GHSA-jv64-2m3x-6v4q
reference_id GHSA-jv64-2m3x-6v4q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jv64-2m3x-6v4q
fixed_packages
aliases CVE-2021-41948, GHSA-jv64-2m3x-6v4q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fc5n-dcez-93fn
18
url VCID-gmvv-sz8z-ebgp
vulnerability_id VCID-gmvv-sz8z-ebgp
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-37059
reference_id
reference_type
scores
0
value 0.00257
scoring_system epss
scoring_elements 0.49214
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-37059
1
reference_url https://drive.google.com/file/d/1lmU8zuyzyC9LHFXuXzamnkcLcjcfs0xE/view?usp=sharing
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://drive.google.com/file/d/1lmU8zuyzyC9LHFXuXzamnkcLcjcfs0xE/view?usp=sharing
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-37059
reference_id CVE-2022-37059
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-37059
4
reference_url https://github.com/advisories/GHSA-rh4r-9689-6xw4
reference_id GHSA-rh4r-9689-6xw4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rh4r-9689-6xw4
fixed_packages
aliases CVE-2022-37059, GHSA-rh4r-9689-6xw4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gmvv-sz8z-ebgp
19
url VCID-hay9-1wuc-s3b1
vulnerability_id VCID-hay9-1wuc-s3b1
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-41502
reference_id
reference_type
scores
0
value 0.00206
scoring_system epss
scoring_elements 0.42778
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-41502
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/issues/885
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/885
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41502
reference_id CVE-2021-41502
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-41502
4
reference_url https://github.com/advisories/GHSA-jvq4-cgfw-jgf4
reference_id GHSA-jvq4-cgfw-jgf4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jvq4-cgfw-jgf4
fixed_packages
aliases CVE-2021-41502, GHSA-jvq4-cgfw-jgf4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hay9-1wuc-s3b1
20
url VCID-j2eh-myxv-abbm
vulnerability_id VCID-j2eh-myxv-abbm
summary 
Subrion CMS vulnerable to SQL Injection
Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25400
reference_id
reference_type
scores
0
value 0.00492
scoring_system epss
scoring_elements 0.65958
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25400
1
reference_url https://cwe.mitre.org/data/definitions/89.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cwe.mitre.org/data/definitions/89.html
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://github.com/intelliants/subrion/issues/910
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-15T18:04:06Z/
url https://github.com/intelliants/subrion/issues/910
4
reference_url https://subrion.org
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://subrion.org
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25400
reference_id CVE-2024-25400
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25400
6
reference_url https://github.com/advisories/GHSA-xxf8-fpmr-fw7v
reference_id GHSA-xxf8-fpmr-fw7v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xxf8-fpmr-fw7v
fixed_packages
aliases CVE-2024-25400, GHSA-xxf8-fpmr-fw7v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j2eh-myxv-abbm
21
url VCID-j8ge-mhfk-ebd9
vulnerability_id VCID-j8ge-mhfk-ebd9
summary 
Subrion CMS vulnerable to cross-site scripting
Multiple reflected Cross-site Scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allow attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-70958
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.04203
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-70958
1
reference_url https://github.com/emirhanyucell/Subrion-CMS-4.2.1/blob/main/subrion-cms-exploit.txt
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-03T14:39:36Z/
url https://github.com/emirhanyucell/Subrion-CMS-4.2.1/blob/main/subrion-cms-exploit.txt
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-70958
reference_id CVE-2025-70958
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-70958
4
reference_url https://github.com/advisories/GHSA-9jjm-mc56-3qxv
reference_id GHSA-9jjm-mc56-3qxv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9jjm-mc56-3qxv
fixed_packages
aliases CVE-2025-70958, GHSA-9jjm-mc56-3qxv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j8ge-mhfk-ebd9
22
url VCID-jqzh-mw8h-23bv
vulnerability_id VCID-jqzh-mw8h-23bv
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43828
reference_id
reference_type
scores
0
value 0.0027
scoring_system epss
scoring_elements 0.50662
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43828
1
reference_url https://github.com/al3zx/xss_languages_subrion_4.2.1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-24T14:20:11Z/
url https://github.com/al3zx/xss_languages_subrion_4.2.1
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43828
reference_id CVE-2023-43828
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43828
4
reference_url https://github.com/advisories/GHSA-4w2j-wj9q-6wpx
reference_id GHSA-4w2j-wj9q-6wpx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4w2j-wj9q-6wpx
fixed_packages
aliases CVE-2023-43828, GHSA-4w2j-wj9q-6wpx
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jqzh-mw8h-23bv
23
url VCID-ng2d-pg2s-2fac
vulnerability_id VCID-ng2d-pg2s-2fac
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-23761
reference_id
reference_type
scores
0
value 0.00402
scoring_system epss
scoring_elements 0.61069
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-23761
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://subrion.org
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://subrion.org
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-23761
reference_id CVE-2020-23761
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-23761
4
reference_url http://hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version
reference_id CVE-2020-23761-STORED-XSS-VULNERABILITY-IN-SUBRION-CMS-VERSION
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version
5
reference_url https://github.com/advisories/GHSA-xhc3-5pgf-p576
reference_id GHSA-xhc3-5pgf-p576
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xhc3-5pgf-p576
fixed_packages
aliases CVE-2020-23761, GHSA-xhc3-5pgf-p576
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ng2d-pg2s-2fac
24
url VCID-ngpm-xvdu-sybs
vulnerability_id VCID-ngpm-xvdu-sybs
summary 
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-43464
reference_id
reference_type
scores
0
value 0.00782
scoring_system epss
scoring_elements 0.74025
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-43464
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/issues/888
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/888
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-43464
reference_id CVE-2021-43464
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-43464
4
reference_url https://github.com/advisories/GHSA-g54x-29xv-58h5
reference_id GHSA-g54x-29xv-58h5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g54x-29xv-58h5
fixed_packages
aliases CVE-2021-43464, GHSA-g54x-29xv-58h5
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ngpm-xvdu-sybs
25
url VCID-q9uf-qqfn-n7gr
vulnerability_id VCID-q9uf-qqfn-n7gr
summary
references
0
reference_url http://packetstormsecurity.com/files/157699/Subrion-CMS-4.2.1-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/157699/Subrion-CMS-4.2.1-Cross-Site-Scripting.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-20389
reference_id
reference_type
scores
0
value 0.00313
scoring_system epss
scoring_elements 0.54708
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-20389
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-20389
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-20389
fixed_packages
aliases CVE-2019-20389, GHSA-xvgx-668j-f67p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9uf-qqfn-n7gr
26
url VCID-qwxk-wzqe-7kdp
vulnerability_id VCID-qwxk-wzqe-7kdp
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-43884
reference_id
reference_type
scores
0
value 0.00184
scoring_system epss
scoring_elements 0.39903
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-43884
1
reference_url https://github.com/dpuenteramirez/XSS-ReferenceID-Subrion_4.2.1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T19:15:32Z/
url https://github.com/dpuenteramirez/XSS-ReferenceID-Subrion_4.2.1
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-43884
reference_id CVE-2023-43884
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-43884
4
reference_url https://github.com/advisories/GHSA-7vff-rv2f-cj79
reference_id GHSA-7vff-rv2f-cj79
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7vff-rv2f-cj79
fixed_packages
aliases CVE-2023-43884, GHSA-7vff-rv2f-cj79
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qwxk-wzqe-7kdp
27
url VCID-r136-w6fm-t7fc
vulnerability_id VCID-r136-w6fm-t7fc
summary 
Unrestricted Upload of File with Dangerous Type
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.
references
0
reference_url http://packetstormsecurity.com/files/162591/Subrion-CMS-4.2.1-Shell-Upload.html
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/162591/Subrion-CMS-4.2.1-Shell-Upload.html
1
reference_url http://packetstormsecurity.com/files/173998/Intelliants-Subrion-CMS-4.2.1-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/173998/Intelliants-Subrion-CMS-4.2.1-Remote-Code-Execution.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19422
reference_id
reference_type
scores
0
value 0.84263
scoring_system epss
scoring_elements 0.99328
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19422
3
reference_url https://github.com/intelliants/subrion/commit/74359bcfaea424edda6d782a8ac25397c55972ab
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/74359bcfaea424edda6d782a8ac25397c55972ab
4
reference_url https://github.com/intelliants/subrion/issues/801
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/801
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49876.py
reference_id CVE-2018-19422
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/49876.py
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-19422
reference_id CVE-2018-19422
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-19422
7
reference_url https://github.com/advisories/GHSA-73xj-v6gc-g5p5
reference_id GHSA-73xj-v6gc-g5p5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-73xj-v6gc-g5p5
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.2
purl pkg:composer/intelliants/subrion@4.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.2
aliases CVE-2018-19422, GHSA-73xj-v6gc-g5p5
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r136-w6fm-t7fc
28
url VCID-s1ez-jft2-tydn
vulnerability_id VCID-s1ez-jft2-tydn
summary 
Subrion CMS vulnerable to Cross Site Scripting
Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25399
reference_id
reference_type
scores
0
value 0.00245
scoring_system epss
scoring_elements 0.47933
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25399
1
reference_url https://cwe.mitre.org/data/definitions/79
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-27T18:21:09Z/
url https://cwe.mitre.org/data/definitions/79
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25399
reference_id CVE-2024-25399
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25399
4
reference_url https://github.com/advisories/GHSA-q4qh-8pxw-r48q
reference_id GHSA-q4qh-8pxw-r48q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q4qh-8pxw-r48q
fixed_packages
aliases CVE-2024-25399, GHSA-q4qh-8pxw-r48q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s1ez-jft2-tydn
29
url VCID-sc65-ev58-2bbk
vulnerability_id VCID-sc65-ev58-2bbk
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12469
reference_id
reference_type
scores
0
value 0.00225
scoring_system epss
scoring_elements 0.45351
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12469
1
reference_url https://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection/readme
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection/readme
2
reference_url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection
3
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-12469
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-12469
fixed_packages
aliases CVE-2020-12469, GHSA-fmqq-hw9m-448q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sc65-ev58-2bbk
30
url VCID-sqbf-5a82-yucu
vulnerability_id VCID-sqbf-5a82-yucu
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.
references
0
reference_url http://intelliants.com
reference_id
reference_type
scores
url http://intelliants.com
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-18324
reference_id
reference_type
scores
0
value 0.06672
scoring_system epss
scoring_elements 0.9137
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-18324
2
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
3
reference_url http://subrion.com
reference_id
reference_type
scores
url http://subrion.com
4
reference_url https://github.com/hamm0nz/CVE-2020-18324
reference_id CVE-2020-18324
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hamm0nz/CVE-2020-18324
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-18324
reference_id CVE-2020-18324
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-18324
6
reference_url https://github.com/advisories/GHSA-xj7h-g7rh-gjcw
reference_id GHSA-xj7h-g7rh-gjcw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xj7h-g7rh-gjcw
fixed_packages
aliases CVE-2020-18324, GHSA-xj7h-g7rh-gjcw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sqbf-5a82-yucu
31
url VCID-vzeg-42da-euej
vulnerability_id VCID-vzeg-42da-euej
summary 
Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-18326
reference_id
reference_type
scores
0
value 0.0164
scoring_system epss
scoring_elements 0.82255
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-18326
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/hamm0nz/CVE-2020-18326
reference_id CVE-2020-18326
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/hamm0nz/CVE-2020-18326
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-18326
reference_id CVE-2020-18326
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-18326
4
reference_url https://github.com/advisories/GHSA-9cc3-5w85-pxvx
reference_id GHSA-9cc3-5w85-pxvx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9cc3-5w85-pxvx
fixed_packages
aliases CVE-2020-18326, GHSA-9cc3-5w85-pxvx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vzeg-42da-euej
32
url VCID-ydhn-xpam-jqgm
vulnerability_id VCID-ydhn-xpam-jqgm
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12468
reference_id
reference_type
scores
0
value 0.00273
scoring_system epss
scoring_elements 0.50904
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12468
1
reference_url https://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/CSV%20Injection/readme
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/CSV%20Injection/readme
2
reference_url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection
3
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-12468
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-12468
fixed_packages
aliases CVE-2020-12468, GHSA-4f4h-jgjp-3vfg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ydhn-xpam-jqgm
Fixing_vulnerabilities
0
url VCID-bqcn-jmjn-g3c5
vulnerability_id VCID-bqcn-jmjn-g3c5
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-21037
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.38931
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-21037
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/blob/c8aaeb04f44554e454be9763527a7be7fbe7bfd5/changelog.txt#L899
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/blob/c8aaeb04f44554e454be9763527a7be7fbe7bfd5/changelog.txt#L899
3
reference_url https://github.com/intelliants/subrion/issues/638
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/638
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-21037
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-21037
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.0
purl pkg:composer/intelliants/subrion@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bwe-5b6b-a7e2
1
vulnerability VCID-44kx-4nnh-4bdf
2
vulnerability VCID-94z6-as1s-pkem
3
vulnerability VCID-by36-7n26-g7cc
4
vulnerability VCID-ekj6-hqpd-5ybq
5
vulnerability VCID-fc5n-dcez-93fn
6
vulnerability VCID-hay9-1wuc-s3b1
7
vulnerability VCID-ng2d-pg2s-2fac
8
vulnerability VCID-ngpm-xvdu-sybs
9
vulnerability VCID-r136-w6fm-t7fc
10
vulnerability VCID-sc65-ev58-2bbk
11
vulnerability VCID-sqbf-5a82-yucu
12
vulnerability VCID-vzeg-42da-euej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.0
1
url pkg:composer/intelliants/subrion@4.2.1
purl pkg:composer/intelliants/subrion@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bwe-5b6b-a7e2
1
vulnerability VCID-3h1n-dvmt-5qhz
2
vulnerability VCID-3hbd-spm4-2kaz
3
vulnerability VCID-44kx-4nnh-4bdf
4
vulnerability VCID-51fa-htgd-pkd7
5
vulnerability VCID-7yej-24pb-d3dm
6
vulnerability VCID-8g7b-wfgz-77f1
7
vulnerability VCID-8gvw-wym4-qufa
8
vulnerability VCID-8n55-g9s6-5qbz
9
vulnerability VCID-94z6-as1s-pkem
10
vulnerability VCID-9fac-c1gc-jbft
11
vulnerability VCID-9hkc-qw4n-t7at
12
vulnerability VCID-abws-hvpw-myfy
13
vulnerability VCID-by36-7n26-g7cc
14
vulnerability VCID-cjhs-mtaa-7kdb
15
vulnerability VCID-ekj6-hqpd-5ybq
16
vulnerability VCID-f7sw-fp56-hudc
17
vulnerability VCID-fc5n-dcez-93fn
18
vulnerability VCID-gmvv-sz8z-ebgp
19
vulnerability VCID-hay9-1wuc-s3b1
20
vulnerability VCID-j2eh-myxv-abbm
21
vulnerability VCID-j8ge-mhfk-ebd9
22
vulnerability VCID-jqzh-mw8h-23bv
23
vulnerability VCID-ng2d-pg2s-2fac
24
vulnerability VCID-ngpm-xvdu-sybs
25
vulnerability VCID-q9uf-qqfn-n7gr
26
vulnerability VCID-qwxk-wzqe-7kdp
27
vulnerability VCID-r136-w6fm-t7fc
28
vulnerability VCID-s1ez-jft2-tydn
29
vulnerability VCID-sc65-ev58-2bbk
30
vulnerability VCID-sqbf-5a82-yucu
31
vulnerability VCID-vzeg-42da-euej
32
vulnerability VCID-ydhn-xpam-jqgm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.1
aliases CVE-2018-21037, GHSA-g8j7-w673-4mjp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bqcn-jmjn-g3c5
1
url VCID-ue8a-wx3x-fuat
vulnerability_id VCID-ue8a-wx3x-fuat
summary 
Cross-Site Request Forgery (CSRF)
Subrion CMS 4.1.5 has CSRF in blog/delete/.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-18366
reference_id
reference_type
scores
0
value 0.00141
scoring_system epss
scoring_elements 0.33959
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-18366
1
reference_url https://github.com/intelliants/subrion
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion
2
reference_url https://github.com/intelliants/subrion/commit/8c08d7b92a4b7b5820a951d53c24844715439b73
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/commit/8c08d7b92a4b7b5820a951d53c24844715439b73
3
reference_url https://github.com/intelliants/subrion/issues/477
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/intelliants/subrion/issues/477
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-18366
reference_id CVE-2017-18366
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-18366
5
reference_url https://github.com/advisories/GHSA-c939-g732-48r8
reference_id GHSA-c939-g732-48r8
reference_type
scores
url https://github.com/advisories/GHSA-c939-g732-48r8
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.0
purl pkg:composer/intelliants/subrion@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bwe-5b6b-a7e2
1
vulnerability VCID-44kx-4nnh-4bdf
2
vulnerability VCID-94z6-as1s-pkem
3
vulnerability VCID-by36-7n26-g7cc
4
vulnerability VCID-ekj6-hqpd-5ybq
5
vulnerability VCID-fc5n-dcez-93fn
6
vulnerability VCID-hay9-1wuc-s3b1
7
vulnerability VCID-ng2d-pg2s-2fac
8
vulnerability VCID-ngpm-xvdu-sybs
9
vulnerability VCID-r136-w6fm-t7fc
10
vulnerability VCID-sc65-ev58-2bbk
11
vulnerability VCID-sqbf-5a82-yucu
12
vulnerability VCID-vzeg-42da-euej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.0
1
url pkg:composer/intelliants/subrion@4.2.1
purl pkg:composer/intelliants/subrion@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3bwe-5b6b-a7e2
1
vulnerability VCID-3h1n-dvmt-5qhz
2
vulnerability VCID-3hbd-spm4-2kaz
3
vulnerability VCID-44kx-4nnh-4bdf
4
vulnerability VCID-51fa-htgd-pkd7
5
vulnerability VCID-7yej-24pb-d3dm
6
vulnerability VCID-8g7b-wfgz-77f1
7
vulnerability VCID-8gvw-wym4-qufa
8
vulnerability VCID-8n55-g9s6-5qbz
9
vulnerability VCID-94z6-as1s-pkem
10
vulnerability VCID-9fac-c1gc-jbft
11
vulnerability VCID-9hkc-qw4n-t7at
12
vulnerability VCID-abws-hvpw-myfy
13
vulnerability VCID-by36-7n26-g7cc
14
vulnerability VCID-cjhs-mtaa-7kdb
15
vulnerability VCID-ekj6-hqpd-5ybq
16
vulnerability VCID-f7sw-fp56-hudc
17
vulnerability VCID-fc5n-dcez-93fn
18
vulnerability VCID-gmvv-sz8z-ebgp
19
vulnerability VCID-hay9-1wuc-s3b1
20
vulnerability VCID-j2eh-myxv-abbm
21
vulnerability VCID-j8ge-mhfk-ebd9
22
vulnerability VCID-jqzh-mw8h-23bv
23
vulnerability VCID-ng2d-pg2s-2fac
24
vulnerability VCID-ngpm-xvdu-sybs
25
vulnerability VCID-q9uf-qqfn-n7gr
26
vulnerability VCID-qwxk-wzqe-7kdp
27
vulnerability VCID-r136-w6fm-t7fc
28
vulnerability VCID-s1ez-jft2-tydn
29
vulnerability VCID-sc65-ev58-2bbk
30
vulnerability VCID-sqbf-5a82-yucu
31
vulnerability VCID-vzeg-42da-euej
32
vulnerability VCID-ydhn-xpam-jqgm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.1
aliases CVE-2017-18366, GHSA-c939-g732-48r8
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ue8a-wx3x-fuat
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.1