CVE-2010-1867: Campware.org Campsite

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

Affected products

• Campware.org Campsite: up to and including 3.3.5; version 2.2.2 only; version 2.3.3 only; version 2.4.3 only; version 2.5.2 only; version 2.6.0 only; …

Published 2010-05-07. Last modified 2026-06-16.