CVE-2010-4781: Enanocms Enano CMS

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message.

Affected products

• Enanocms Enano CMS: up to and including 1.1.7; version 0.8.1 only; version 0.8.2 only; version 0.8.3 only; version 0.8.4 only; version 0.9.1 only; …

Published 2011-04-07. Last modified 2026-06-16.