CVE-2010-4271: SQL Injection
Published Nov 16, 2010
·Updated
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
33 affected components
ImpressCMS ImpressCMS=1.1-alpha1
ImpressCMS ImpressCMS<=1.2.3
ImpressCMS ImpressCMS=1.1.3-beta
ImpressCMS ImpressCMS=1.1-beta1
ImpressCMS ImpressCMS=1.2-final
ImpressCMS ImpressCMS=1.1-alpha2
ImpressCMS ImpressCMS=1.1-rc2
ImpressCMS ImpressCMS=1.1.1-rc1
ImpressCMS ImpressCMS=1.1.3-final
ImpressCMS ImpressCMS=1.0-rc1
ImpressCMS ImpressCMS=1.2.1-final
ImpressCMS ImpressCMS=1.0-rc3
ImpressCMS ImpressCMS=1.0-beta2
ImpressCMS ImpressCMS=1.2.1-beta
ImpressCMS ImpressCMS=1.2.3-beta
ImpressCMS ImpressCMS=1.2-rc1
ImpressCMS ImpressCMS=1.0-beta1
ImpressCMS ImpressCMS=1.1.2-rc1
ImpressCMS ImpressCMS=1.0-final
ImpressCMS ImpressCMS=1.2-alpha1
ImpressCMS ImpressCMS=1.1.3-rc1
ImpressCMS ImpressCMS=1.1.2-rc2
ImpressCMS ImpressCMS=1.2.1-rc1
ImpressCMS ImpressCMS=1.1.2-final
ImpressCMS ImpressCMS=1.1-rc3
ImpressCMS ImpressCMS=1.0-rc2
ImpressCMS ImpressCMS=1.1.1-rc2
ImpressCMS ImpressCMS=1.2-rc2
ImpressCMS ImpressCMS=1.1-final
ImpressCMS ImpressCMS=1.2-alpha2
ImpressCMS ImpressCMS=1.1-rc1
ImpressCMS ImpressCMS=1.1.1-final
ImpressCMS ImpressCMS=1.2-beta
Event History
Nov 16, 2010
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4271?
CVE-2010-4271 has a high severity due to its potential for arbitrary SQL command execution.
2
How do I fix CVE-2010-4271?
To fix CVE-2010-4271, upgrade to ImpressCMS version 1.2.3 RC2 or later.
3
What types of attacks can CVE-2010-4271 facilitate?
CVE-2010-4271 can facilitate SQL injection attacks allowing unauthorized access to database information.
4
Which versions of ImpressCMS are affected by CVE-2010-4271?
Versions of ImpressCMS before 1.2.3 RC2, including various betas and alphas, are affected by CVE-2010-4271.
5
How can I identify if my system is vulnerable to CVE-2010-4271?
You can identify if your system is vulnerable to CVE-2010-4271 by checking the version of ImpressCMS installed and ensuring it is not below 1.2.3 RC2.