CVE-2010-2015

LiSK CMS 4.4 is affected by SQL injection vulnerabilities (CVE-2010-2015) in two server-side scripts: cp_messages.php (view_inbox via id) and edit_email.php (via id). The root cause is inadequate input sanitization of the id parameter, enabling remote attackers with CP Messages privileges to craf...