EUVD-2010-1887

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SQL injection in ArticleAttachment::GetAttachmentsByArticleNumber allows remote SQL command execution.

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Campsite TinyMCE plugin 'attachments.php' 'article_id' Parameter SQL Injection	5 May 201000:00	–	nessus
CVE	CVE-2010-1867	7 May 201022:00	–	cve
Cvelist	CVE-2010-1867	7 May 201022:00	–	cvelist
NVD	CVE-2010-1867	7 May 201023:00	–	nvd
OpenVAS	Campsite 'article_id' Parameter SQL Injection Vulnerability	21 Jun 201000:00	–	openvas
OpenVAS	Campsite 'article_id' Parameter SQL Injection Vulnerability	21 Jun 201000:00	–	openvas
Prion	Design/Logic Flaw	6 May 201018:30	–	prion
Prion	Sql injection	7 May 201023:00	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "5e630523-c2f9-3917-ad65-ad2306ca073e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9b8748f0-5214-31b6-bb1b-da94e53c9661",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
osvdb	www.osvdb.org/64215
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/58285
secunia	www.secunia.com/advisories/39580
campware	www.campware.org/en/camp/campsite_news/832/
php-security	www.php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html
securityfocus	www.securityfocus.com/bid/39862
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-1867
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

EPSS0.00791