Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2015
cve-2010-2015
sql injection
lisk cms 4.4
remote attackers
arbitrary commands
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.4%
Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id parameter to cp/edit_email.php.
Affected configurations
Node
createch-grouplisk_cmsMatch4.4
ORcreatech-grouplisk_cmsMatch4.4-corporate
ORcreatech-grouplisk_cmsMatch4.4-custom
ORcreatech-grouplisk_cmsMatch4.4-e-commerce
ORcreatech-grouplisk_cmsMatch4.4-extranet\/intranet
ORcreatech-grouplisk_cmsMatch4.4-portal\/community
| CPE | Name | Operator | Version |
|---|---|---|---|
| createch-group:lisk_cms | createch-group lisk cms | eq | 4.4 |
Related
nvd
nvd
CVE-2010-2015
2010-05-24 17:30:01
cvelist
cvelist
CVE-2010-2015
2022-10-03 16:21:08
prion
prion
Sql injection
2010-05-24 17:30:00
htbridge
htbridge
Multiple Vulnerabilities in LiSK CMS
2010-05-06 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.4%
Related for CVE-2010-2015