cbcvebase.
CVE-2010-4781
published 2011-04-07

CVE-2010-4781: index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via…

PriorityP418medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
3.02%
85.8th percentile
index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message.

Affected

23 ranges
VendorProductVersion rangeFixed in
enanocmsenano_cms<= 1.1.7—
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
enanocmsenano_cms——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.