https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:34:57.157252+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01968 bdu:2024-01968 2026-10-03T19:34:57.161723+00:00 bdu:2024-01968 https://cve.radiocsirt.org/vuln/euvd-2026-239608 EUVD-2026-239608 2026-10-03T19:34:57.161755+00:00 EUVD-2026-239608 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25400 fkie_cve-2024-25400 2026-10-03T19:34:57.161770+00:00

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers to an HTTP request to a PHP file that only contains a class, without any mechanism for accepting external input, and the reportedly vulnerable method is not present in the file.

 https://cve.radiocsirt.org/vuln/ghsa-xxf8-fpmr-fw7v Withdrawn: GHSA-xxf8-fpmr-fw7v — Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection 2026-10-03T19:34:57.161800+00:00

Withdrawn by the publisher.

Affected: Packagist: intelliants/subrion

## Withdrawn Advisory

This advisory has been withdrawn because it was determined to not be a vulnerability. Please see the issue [here](https://github.com/intelliants/subrion/issues/910#issuecomment-2174012538) for more information.

## Original Description

Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php.

 https://cve.radiocsirt.org/vuln/gsd-2024-25400 gsd-2024-25400 2026-10-03T19:34:57.161827+00:00 gsd-2024-25400