An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool.
References
| Link | Resource |
|---|---|
| https://github.com/intelliants/subrion/issues/913 | Exploit Third Party Advisory Issue Tracking |
Configurations
History
02 Oct 2025, 19:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:* | |
| References | () https://github.com/intelliants/subrion/issues/913 - Exploit, Third Party Advisory, Issue Tracking | |
| First Time |
Intelliants subrion Cms
Intelliants |
11 Sep 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-566 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
11 Sep 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-11 19:15
Updated : 2025-10-02 19:33
NVD link : CVE-2025-56556
Mitre link : CVE-2025-56556
CVE.ORG link : CVE-2025-56556
JSON object : View
Products Affected
intelliants
- subrion_cms
CWE
CWE-566
Authorization Bypass Through User-Controlled SQL Primary Key