cbcvebase.
CVE-2010-4780
published 2011-04-07

CVE-2010-4780: SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8…

PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.59%
72.6th percentile
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected

23 ranges
VendorProductVersion rangeFixed in
enanocmsenano_cms<= 1.1.7—
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.