NetSight
high7.5

CVE-2010-0471

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrar…

Impact

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

Affected products

VendorProductAffected versions
EnanocmsEnanocms
through 1.0.6
Versions 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.9.1

Weakness classification

References