Published: 03/11/2010 Updated: 10/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote malicious users to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

Vulnerable Product	Search on Vulmon	Subscribe to Product
4site 4site cms
4site 4site cms 2.2
4site 4site cms 2.0

source: wwwsecurityfocuscom/bid/44258/info 4Site CMS is prone to an SQL-injection vulnerability An attacker can exploit this issue to carry out unauthorized actions on the underlying database which may compromise the application and may aid in further attacks 4Site CMS 26 is vulnerable; other versions may also be affected ww ...

CWE-89 http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html http://www.securityfocus.com/bid/44258 http://secunia.com/advisories/33733 http://www.securityfocus.com/archive/1/514376/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/34883/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4152

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect