CVE-2010-4152 SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors a...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 4site cms | <= 2.6 | No fix listed |
| 4site cms | = 2.0 | No fix listed |
| 4site cms | = 2.2 | No fix listed |
References
- 33733 third-party-advisory vendor-advisory
- www.htbridge.ch exploit
- 20101019 SQL Injection in 4site CMS mailing-list
- 44258 vdb-entry