Enanocms is a lightweight content-management system whose vulnerability profile centers on its core CMS product and reflects recurrent weaknesses in input sanitization and data access, specifically SQL injection and sensitive-information exposure. These are characteristic flaws in database-driven web applications where insufficient validation of user input and overly permissive data handling create avenues for unauthorized query manipulation and information disclosure; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Enanocms over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4780HIGH SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 | Apr 7, 2011 | 7.5 | 33 | NO | YES |
CVE-2010-4781MEDIUM index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title param | Apr 7, 2011 | 5.0 | 27 | NO | YES |
CVE-2010-0471HIGH SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via un | Feb 2, 2010 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Enanocms.
Media articles that mention a CVE ID that affects a product developed by Enanocms — matched by CVE ID, not by vendor name.