CVE-2010-2015
createch-group lisk cms: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id parameter to cp/edit_email.php.
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- createch-group:lisk_cms
References
- http://secunia.com/advisories/39912
- http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms.html
- http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms_1.html
- http://secunia.com/advisories/39912
- http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms.html