Unscored CVE-2010-0471 EUVD-2010-0502GHSA-8pwq-jc34-j7q9

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers…

Published Feb 2, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

References

61974 vdb-entry
38253 third-party-advisory
http://enanocms.org/Release_notes/1.0.6pl1