CVE-2011-10001

CRITIQUE 9.8CVE-2011-10001 · Published 18/01/2023 · updated 16/06/2026

En bref

CVE-2011-10001 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant phoenixcf (phoenixcf project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.69%, plus élevée que 53.0% des vulnérabilités.
Correctif : mettre à jour vers 2011-02-07 ou plus récent.

Package	Affected versions	Patched versions
phoenixcf phoenixcf_project	`< 2011-02-07`	`2011-02-07`

Description

A vulnerability was found in iamdroppy phoenixcf. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file content/2-Community/articles.cfm. The manipulation leads to sql injection. The patch is named d156faf8bc36cd49c3b10d3697ef14167ad451d8. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218491.

References

iamdroppy/phoenixcf commit d156faf · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free