Security Advisory

CVE-2010-4152

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-11-03 19:00:00

Last updated 2024-08-07 03:34:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

← Browse all CVEs View on cve.org ↗