https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:09:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71292 <p><strong>Affected:</strong> intelliants subrion</p> <p>Subrion CMS&#39;s admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not present in the per-controller whitelist array: , which is then placed into %s with only backtick-quoting and no escaping.</p> <p><strong>Affected:</strong> intelliants subrion</p> <p>Subrion CMS&#39;s admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but falls back to the raw, attacker-supplied GET parameter whenever the requested key is not present in the per-controller whitelist array: , which is then placed into %s with only backtick-quoting and no escaping.</p> https://cve.radiocsirt.org/vuln/cve-2026-71292