{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-11-30T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-09-22T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "15645", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/15645"}, {"name": "42375", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/42375"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt"}, {"tags": ["x_refsource_MISC"], "url": "http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html"}, {"name": "69537", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/69537"}, {"name": "8183", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/8183"}, {"name": "45120", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/45120"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-4780", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "15645", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/15645"}, {"name": "42375", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42375"}, {"name": "http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released", "refsource": "CONFIRM", "url": "http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released"}, {"name": "http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt", "refsource": "MISC", "url": "http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt"}, {"name": "http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html", "refsource": "MISC", "url": "http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html"}, {"name": "69537", "refsource": "OSVDB", "url": "http://osvdb.org/69537"}, {"name": "8183", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/8183"}, {"name": "45120", "refsource": "BID", "url": "http://www.securityfocus.com/bid/45120"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-4780", "datePublished": "2011-04-07T14:00:00", "dateReserved": "2011-04-07T00:00:00", "dateUpdated": "2011-09-22T09:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:enanocms:enano_cms:*:pl2:*:*:*:*:*:*", "matchCriteriaId": "87232E70-4CA8-45B8-9080-70EA2994E5B9", "versionEndIncluding": "1.1.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "6A43E52E-03B5-40B9-9E3A-5B3353644B22", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "8941C96B-66D2-4698-8F4F-1BCA7CFCF2DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "2A58771D-47B7-4F25-976B-BA7C5183EDC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "0FD6E68E-84F1-4122-862E-89799A7E0586", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "3A913B90-0B53-487D-AAB5-44F779C0E571", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "36763963-23E9-41E4-AFCC-8FF18B538200", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:0.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "E1D358C3-B308-4160-A4E9-D0CE3A4BA9BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "AB19E3D4-494B-4B69-8A11-2AFD11459F1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "92CC2F62-EC91-4FE1-B9D2-613FBCAB59C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "4666B807-8D49-4D37-8CCD-AF269F8ADEC1", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.2b1:*:*:*:*:*:*:*", "matchCriteriaId": "133B45F2-0050-416C-AE41-F9F1CAA6B29E", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "2A975A4E-8D89-4675-B8DA-5A73E9A56230", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D7C54293-C7AE-4980-8E3D-ABD760B7D1EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "A27167E0-9C0D-4178-96E9-BDE9ED3BE0BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "83C931C8-143E-4C9A-9569-3F3C85E32AE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.6:pl1:*:*:*:*:*:*", "matchCriteriaId": "D9D0658C-4250-4611-8661-8A94D9B5946C", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.6:pl2:*:*:*:*:*:*", "matchCriteriaId": "5A0C14A8-F929-4C13-9531-CF8A9CF83D74", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.0.6:pl3:*:*:*:*:*:*", "matchCriteriaId": "F5F7F562-B4FA-4B31-801C-30A440BB4941", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "BB91BB14-0F5E-43EB-9F97-29EF92C3B6CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "774A4E29-ABAE-44FE-8B8A-BA4B83C94998", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "0C070984-CC4F-4372-95DD-A2D353FC0D15", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "91E8277D-DA0D-431C-BD90-C4FDCCB2F547", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "F715029A-6D07-4BCC-B520-CE39EC5C4550", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "97BF0303-B693-4D84-8E39-B367FDE28BF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "8098C7BB-C113-401B-ADBA-58E7FE6972AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:enanocms:enano_cms:1.1.7:pl1:*:*:*:*:*:*", "matchCriteriaId": "AC538FEC-B4C3-4984-8ABB-486F04F1D66D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en la funci\u00f3n check_banlist en include/sessions.php en Enano CMS v1.1.7pl1; v1.0.6pl2, y posiblemente otras versiones anteriores a v1.1.8, v1.0.6pl3 y v1.1.7pl2 permite a atacantes remotos ejecutar comandos SQL a trav\u00e9s de el par\u00e1metro email sobre index.php. NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n de terceros."}], "id": "CVE-2010-4780", "lastModified": "2011-09-22T03:27:18.100", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-04-07T14:23:53.310", "references": [{"source": "cve@mitre.org", "url": "http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/69537"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/42375"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/8183"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.exploit-db.com/exploits/15645"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/45120"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}