Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Intelliants

First CVE: May 1, 2009Active for: 17 yearsTotal CVEs: 65
37.6
VTI Score
Medium

Intelliants maintains a narrowly focused product portfolio centered on web content management and syndication platforms, where despite limited product breadth, the vendor's disclosures occupy a prominent position in the landscape. Vulnerabilities affecting Intelliants skew toward web application input-handling classes, with cross-site scripting, SQL injection, cross-site request forgery, and code injection comprising the durable exposure pattern. These weaknesses recur across products including Subrion CMS, Elitius, and eSync­dicat, reflecting the challenges of securing templating, parameter handling, and user-input sanitization in content-management and data-integration systems. The vendor's disclosures have an elevated tendency to acquire public exploit code, which is expected for widely deployed web applications; defenders should treat Intelliants product instances as regular-maintenance targets and prioritize input-validation patches. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.

FAUCET AI Generated
65
Total CVEs
More Total CVEs than 99% of tracked vendors
1.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
6.7
Avg CVSS Score
Higher Avg CVSS Score than 44% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Intelliants over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 1, 2009
17 years ago
Most Recent CVE
Feb 2, 2026
173 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (65 CVEs).

65 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-19422HIGH
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.
Nov 21, 20187.277NOYES
CVE-2017-11444CRITICAL
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
Jul 19, 20179.840NOYES
CVE-2012-4772HIGH
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter.
Oct 22, 20127.533NOYES
CVE-2011-5212HIGH
SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name or (2) password field.
Oct 22, 20127.533NOYES
CVE-2018-14840MEDIUM
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
Aug 2, 20186.132NOYES
CVE-2017-5543CRITICAL
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login requ
Jan 20, 20179.832NONO
CVE-2020-35437MEDIUM
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.
Dec 26, 20206.131NOYES
CVE-2012-4773MEDIUM
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add,
Oct 22, 20126.831NOYES
CVE-2020-18155CRITICAL
SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.
Jul 14, 20219.830NONO
CVE-2019-17225MEDIUM
Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.
Oct 6, 20195.429NOYES
View all 65 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products65 CVEs
63%
26%
9%
Severity distribution among all CVEs352,427 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (1.5%)
Network52 (80.0%)
Unknown12 (18.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low53 (81.5%)
High0 (0.0%)
Unknown12 (18.5%)
User Interaction
None13 (20.0%)
Unknown12 (18.5%)
Required40 (61.5%)
Privileges Required
Low12 (18.5%)
High7 (10.8%)
None34 (52.3%)
Unknown12 (18.5%)

Exploit Exposure

Signals from CVEs in this vendor scope (65 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
1.5% of CVEs· 97th percentile
Nuclei
1 CVE
1.5% of CVEs· 95th percentile
ExploitDB
13 CVEs
20.0% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Intelliants.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Intelliants — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Intelliants's Products

View all 2 CNAs →

Top CWEs