Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4781. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The document describes SQL injection and path disclosure vulnerabilities in Enano CMS 1.1.7pl1. It provides technical details on how user-supplied input in the 'email' and 'title' variables is improperly sanitized, leading to SQL injection and path disclosure.
Description
index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message.
Exploits (1)
The document describes SQL injection and path disclosure vulnerabilities in Enano CMS 1.1.7pl1. It provides technical details on how user-supplied input in the 'email' and 'title' variables is improperly sanitized, leading to SQL injection and path disclosure.