CVE-2010-2095

CMSQlite < 1.2 - SQL Injection via c Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.

Scores

EPSS 0.0106
EPSS Percentile 60.9%

Details

CWE
CWE-89
Status published
Products (3)
cmsqlite/cmsqlite 1.0
cmsqlite/cmsqlite 1.1
cmsqlite/cmsqlite < 1.2
Published May 27, 2010
Tracked Since Feb 18, 2026