Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4922. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates multiple SQL injection and cross-site scripting (XSS) vulnerabilities in Allinta CMS. It provides URLs with crafted payloads to trigger XSS and SQLi, confirming the lack of input sanitization.
Description
Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp.
Exploits (1)
The exploit demonstrates multiple SQL injection and cross-site scripting (XSS) vulnerabilities in Allinta CMS. It provides URLs with crafted payloads to trigger XSS and SQLi, confirming the lack of input sanitization.