CVE-2010-4780: Enanocms Enano CMS

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected products

• Enanocms Enano CMS: up to and including 1.1.7; version 0.8.1 only; version 0.8.2 only; version 0.8.3 only; version 0.8.4 only; version 0.9.1 only; …

Published 2011-04-07. Last modified 2026-06-16.