Vulnerabilities

TI-2010-04504 CVE-2010-4781 · GHSA-9723-74jg-9vf6

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and…

LOW 28

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation pat…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03023 Published 2011-04-07 No fix listed CWE-200

TI-2010-04503 CVE-2010-4780 · GHSA-96c9-jxv3-jj8w

SQL injection vulnerability in the check_banlist function in includes/sessions.php in…

LOW 36

SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01588 Published 2011-04-07 No fix listed CWE-89

TI-2010-00448 CVE-2010-0471 · GHSA-8pwq-jc34-j7q9

SQL injection vulnerability in the comment submission interface (includes/comment.php) in…

LOW 35

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2010-02-02 No fix listed CWE-89

Vulnerabilities

Filters

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and…

SQL injection vulnerability in the check_banlist function in includes/sessions.php in…

SQL injection vulnerability in the comment submission interface (includes/comment.php) in…