Sql injection

2010-02-0217:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.6%

JSON

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

CPENameOperatorVersion
enanocmseq1.0.2
enanocmseq0.9.2
enanocmseq1.0.5
enanocmseq0.8.1
enanocmseq0.8.4
enanocmseq1.0.4
enanocmseq0.9.3
enanocmseq0.9.1
enanocmseq0.8.2
enanocmseq0.8.3

Name	Operator	Version
enanocms	eq	1.0.2
enanocms	eq	0.9.2
enanocms	eq	1.0.5
enanocms	eq	0.8.1
enanocms	eq	0.8.4
enanocms	eq	1.0.4
enanocms	eq	0.9.3
enanocms	eq	0.9.1
enanocms	eq	0.8.2
enanocms	eq	0.8.3