CVE-2010-4612

CVE-2010-4612 describes multiple SQL injection vulnerabilities in Hycus CMS version 1.0.3, specifically when the magic_quotes_gpc setting is disabled. Attackers can exploit these flaws by injecting malicious SQL commands through various parameters in user registration, login, password recovery, and search functionalities. This vulnerability carries a CVSS score of 6.8, indicating a medium severity risk with potential for partial compromise of confidentiality, integrity, and availability, requiring moderate attack complexity. While there is no evidence of active exploitation or inclusion in the KEV catalog, exploit code is publicly available via ExploitDB, though community discussion and media coverage are minimal.