CVE-2010-0471

HIGH 7.5CVE-2010-0471 · Published 02/02/2010 · updated 16/06/2026

In short

CVE-2010-0471 is a HIGH (CVSS 7.5) vulnerability affecting enanocms (enanocms).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enanocms enanocms	`= 0.8.1= 0.8.2= 0.8.3= 0.8.4= 0.9.1= 0.9.2= 0.9.3= 1.0= 1.0.1= 1.0.2= 1.0.2b1= 1.0.3= 1.0.4= 1.0.5≤ 1.0.6`	No fix yet

Description

SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

References

enanocms.org/Release_notes/1.0.6pl1 · Patch
secunia.com/advisories/38253 · Vendor Advisory
osvdb.org/61974

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free