CVE-2010-4271

EUVD-2010-4244
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
impresscmsimpresscms
𝑥
≤ 1.2.3
impresscmsimpresscms
1.0:beta1
impresscmsimpresscms
1.0:beta2
impresscmsimpresscms
1.0:final
impresscmsimpresscms
1.0:rc1
impresscmsimpresscms
1.0:rc2
impresscmsimpresscms
1.0:rc3
impresscmsimpresscms
1.1:alpha1
impresscmsimpresscms
1.1:alpha2
impresscmsimpresscms
1.1:beta1
impresscmsimpresscms
1.1:final
impresscmsimpresscms
1.1:rc1
impresscmsimpresscms
1.1:rc2
impresscmsimpresscms
1.1:rc3
impresscmsimpresscms
1.1.1:final
impresscmsimpresscms
1.1.1:rc1
impresscmsimpresscms
1.1.1:rc2
impresscmsimpresscms
1.1.2:final
impresscmsimpresscms
1.1.2:rc1
impresscmsimpresscms
1.1.2:rc2
impresscmsimpresscms
1.1.3:beta
impresscmsimpresscms
1.1.3:final
impresscmsimpresscms
1.1.3:rc1
impresscmsimpresscms
1.2:alpha1
impresscmsimpresscms
1.2:alpha2
impresscmsimpresscms
1.2:beta
impresscmsimpresscms
1.2:final
impresscmsimpresscms
1.2:rc1
impresscmsimpresscms
1.2:rc2
impresscmsimpresscms
1.2.1:beta
impresscmsimpresscms
1.2.1:final
impresscmsimpresscms
1.2.1:rc1
impresscmsimpresscms
1.2.3:beta
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/69082
http://secunia.com/advisories/42160
http://www.impresscms.org/content.php?page=ImpressCMS_1.2.3
http://www.securityfocus.com/bid/44745
http://osvdb.org/69082
http://secunia.com/advisories/42160
http://www.impresscms.org/content.php?page=ImpressCMS_1.2.3
http://www.securityfocus.com/bid/44745