CVE

Id
47364  
CVE No.
CVE-2010-4780  
Status
Candidate  
Description
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20110407)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517286 47364 CVE-2010-4780 EXPLOIT-DB:15645  View
517287 47364 CVE-2010-4780 URL:http://www.exploit-db.com/exploits/15645  View
517288 47364 CVE-2010-4780 MISC:http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt  View
517289 47364 CVE-2010-4780 MISC:http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html  View
517290 47364 CVE-2010-4780 CONFIRM:http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released  View
517291 47364 CVE-2010-4780 BID:45120  View
517292 47364 CVE-2010-4780 URL:http://www.securityfocus.com/bid/45120  View
517293 47364 CVE-2010-4780 OSVDB:69537  View
517294 47364 CVE-2010-4780 URL:http://osvdb.org/69537  View
517295 47364 CVE-2010-4780 SECUNIA:42375  View
517296 47364 CVE-2010-4780 URL:http://secunia.com/advisories/42375  View
517297 47364 CVE-2010-4780 SREASON:8183  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33758 JVNDB-2011-004000 PHP Web Scripts Easy Banner Free の member.php における SQL インジェクションの脆弱性 PHP Web Scripts Easy Banner Free の member.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2010-4784 47364 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004000.html  View