Vulnerabilities

TI-2010-04504 CVE-2010-4781 · GHSA-9723-74jg-9vf6

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and…

LOW 28

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation pat…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03023 Published 2011-04-07 No fix listed CWE-200

TI-2010-04503 CVE-2010-4780 · GHSA-96c9-jxv3-jj8w

SQL injection vulnerability in the check_banlist function in includes/sessions.php in…

LOW 36

SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01588 Published 2011-04-07 No fix listed CWE-89

Vulnerabilities

Filters

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and…

SQL injection vulnerability in the check_banlist function in includes/sessions.php in…