Vulnerability Details CVE-2010-4780
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.7%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2010-4780
-
cpe:2.3:a:enanocms:enano_cms:0.8.1
-
cpe:2.3:a:enanocms:enano_cms:0.8.2
-
cpe:2.3:a:enanocms:enano_cms:0.8.3
-
cpe:2.3:a:enanocms:enano_cms:0.8.4
-
cpe:2.3:a:enanocms:enano_cms:0.9.1
-
cpe:2.3:a:enanocms:enano_cms:0.9.2
-
cpe:2.3:a:enanocms:enano_cms:0.9.3
-
cpe:2.3:a:enanocms:enano_cms:1.0
-
cpe:2.3:a:enanocms:enano_cms:1.0.1
-
cpe:2.3:a:enanocms:enano_cms:1.0.2
-
cpe:2.3:a:enanocms:enano_cms:1.0.2b1
-
cpe:2.3:a:enanocms:enano_cms:1.0.3
-
cpe:2.3:a:enanocms:enano_cms:1.0.4
-
cpe:2.3:a:enanocms:enano_cms:1.0.5
-
cpe:2.3:a:enanocms:enano_cms:1.0.6
-
cpe:2.3:a:enanocms:enano_cms:1.1.1
-
cpe:2.3:a:enanocms:enano_cms:1.1.2
-
cpe:2.3:a:enanocms:enano_cms:1.1.3
-
cpe:2.3:a:enanocms:enano_cms:1.1.4
-
cpe:2.3:a:enanocms:enano_cms:1.1.5
-
cpe:2.3:a:enanocms:enano_cms:1.1.6
-
cpe:2.3:a:enanocms:enano_cms:1.1.7