CVE-2010-2015

🗓️ 24 May 2010 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2010-2015	24 May 201017:30	–	attackerkb
Cvelist	CVE-2010-2015	24 May 201017:00	–	cvelist
Exploit DB	LiSK CMS 4.4 - SQL Injection	24 May 201000:00	–	exploitdb
EUVD	EUVD-2010-2035	7 Oct 202500:30	–	euvd
htbridge	Multiple Vulnerabilities in LiSK CMS	6 May 201000:00	–	htbridge
NVD	CVE-2010-2015	24 May 201017:30	–	nvd
Prion	Sql injection	24 May 201017:30	–	prion
RedhatCVE	CVE-2010-2015	22 May 202512:34	–	redhatcve

NVD

Node

createch-group lisk_cmsMatch4.4-extranet/intranet

createch-group lisk_cmsMatch4.4-portal/community

Source	Link
secunia	www.secunia.com/advisories/39912
htbridge	www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms.html
htbridge	www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms_1.html

Parameter	Position	Path	Description	CWE
id	query param	cp/cp_messages.php	SQL injection vulnerability via id parameter in the view_inbox action of cp/cp_messages.php	CWE-89
id	query param	cp/edit_email.php	SQL injection vulnerability via id parameter in cp/edit_email.php	CWE-89

16 Jun 2026 23:19Current

8.8High risk

Vulners AI Score8.8

CVSS 26.8

EPSS0.00903