Lucene search

PRIOn knowledge basePRION:CVE-2010-4780

HistoryApr 07, 2011 - 2:23 p.m.

Sql injection

2011-04-0714:23:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.9%

JSON

SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
enano_cmseq1.0.6
enano_cmseq1.0.6 pl2
enano_cmseq0.9.1
enano_cmseq1.1.7
enano_cmseq1.1.3
enano_cmseq0.9.2
enano_cmseq1.0
enano_cmseq1.1.5
enano_cmsle1.1.7
enano_cmseq1.0.1

Name	Operator	Version
enano_cms	eq	1.0.6
enano_cms	eq	1.0.6 pl2
enano_cms	eq	0.9.1
enano_cms	eq	1.1.7
enano_cms	eq	1.1.3
enano_cms	eq	0.9.2
enano_cms	eq	1.0
enano_cms	eq	1.1.5
enano_cms	le	1.1.7
enano_cms	eq	1.0.1

Rows per page:

1-10 of 271

References

enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released

osvdb.org/69537

packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt

secunia.com/advisories/42375

securityreason.com/securityalert/8183

www.htbridge.ch/advisory/sql_injection_in_enano_cms.html

www.securityfocus.com/bid/45120

www.exploit-db.com/exploits/15645